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(57) Abstract: A simple, safe 
electronic settlement system. A 
user terminal (20) such as a portable 
telephone is connected to a synchronous 
server (30) at a store by radio. A 
register terminal (10) in the store is 
connected to the synchronous server 
(30) through a leased line. The register 
terminal receives trade identification 
number for identifying the trade from 
the synchronous server and notifies 
the user of it. The user inputs the trade 
identification number into the user 
terminal to send it to the synchronous 
server. The synchronous server 
completes the settlement between the 
register and user terminals correlated 
with each other by means of the trade 
identification number. The register 
terminal authenticates the user through 
the synchronous server. Since the 
user completes the settlement without 
allowing the shop to know the user's 
personal information including the 
credit card number and the password, 
the security is improved. 
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2 (b) <DmWfc£t7F£tlZ> 0 

20 *n$#*>j ftt&<DUi?tf&Zl Otf&ZfaZofaffl^ (1 168) % h L&tttttf 
» ^--1f**2 0(Cl/v?#fI^X7-^ S't^^lfttS (1 1 7 0) o a 
— lF*£5fc2 0 t±Ui?&-&^5 — Sr^-T> Ull 3 (b) (7)®®^r*^i-S (117 
2) o :r-c^-f^OK^y|ri«t5t N 1 1 2©^ll;l^ ^--ifS^ 
*2Oli0 1 3 (a) <£>®®2r??^^cU 1/ ^ft«SA^^a- if K<££ti,5 

25 . 

*>J tlOl^^l 0^$ >< 5^ > pf— -a*3 0 l^SSS5fc 1 0 <b^- 

if«*2 o<z> r^y^cj jfcflg&flfe&U i^^«s*i o i <omm t =u-^M2 
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o t(om\t(Dmm-^t 5 (1174) 0 

p Uv^jfci 0 (1 1 8) „ i/i/^l 0(i, v^^p 

3 0^fb^>^ P4f-5§-£:gmU U«l 0©^>^ D7>/7 0 6^ 
5 ,£:«n"£-£5 (120), CftKJ;^ Ui/Q^%\zi/>? uftm^foZ^tZft 

BHfti-e„ ^-«2 0|j: > HI 13 (c) OMS&^U 3.— if * o 

io Lfc^v ^ ^s^^^^v^/ t^ v^^^9* i ^fe^$•y^s (124) 0 ' =.—f -r y-t* 

3— 1f# N HI 3 ( c) -C^Lfc^.— if#s5fc2 O^MSpcDOK^VSriltRL 
^of--/<3 OtC^m-r^ (1 2 6) o i/y? v-y—s<2> Ote, ^--ifi^*2 0 

as&ft Ltzu^^mmmmm^^mt-r^t^—fmmm^ 1 2 8co*ag& 

20 ^3 0(2, a- if«S5|5 2 0<D3-iF^#-j§-£;|$aji-5 (1 2 8 0) o 3— « 
~/^3 Oii. a— ifT 5 — 6 O^T^-t* L (1 2 8 2) , a— !fi»*2 

o&*.~- -v&mzftxit^zfrFofaffl^z (1 2 8 4). f&mztix^te 

ttfttf, a.—- tf«B5|5 2 0^ y-fc-v 5 raftSftxi^itA/j £3§ffi-T5 (1 2 
25 8 6) 0 a— 9**515 2 O.lCtt, ^-1^^ £ ftT^&l^ CI <b £^1". Hi 3 ( d 
) tf>®ffitfS^£*L5 0 S'l'* nlf— >*3 0 fil/v 5 ^* 1 0 fc3-if#S5fc2 0 (7) 
n^^r^L (1 2 9 0) , mTi-^>o 
u-?—s<3 Of*. ^— "if #3— o \z.&\-fZ> ; fy9 v&yMot =■ 
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✓<3 0(1, a— T'iiSa. — 1f«8*2 0 — Ui?##SrA* Lt, a.— !f«&5fc2 O^v- 
V^pIJ-— <3 0^^^#MIILf;^!: ( » — 1f«8*2 0 IS if «f 
5 Sr^tiJUTt) <t^o 

3— !f*ftaSflfcR"T?£;fc:»£\.3:— - if t*— ^-<— ^ 6 o a>e>3.— «fttr«*j*w 

1-5 (i 2 9 2) „ ^-iftf^tc{i^-^o^j^^taicii-rsw^>6SiB$tLT*3 
tiEi- B9i ^ ^ ^ ^ ^^ti t s (i 294) 0 ^jffl^ta^PBija^fcs^ 

10 »i % ^ — 1fC*2 0— ^ yir- ^ r^iJffi-e#^itA,j £r$SfI-r5 ( 1 2 9 6) „ 
J-— »f«S*2 0tCtt % flJffl-Ct&V^r. <b «r^i", IU1 3 (e) <DWGa&&7f;£tl 
Z> 0 <>y^Pt-/<3 Ofii/^^i o £3.— iffl»*2 0C'>y^tl^ 

b (1 2 9 8) % iS&T-r5o 

15 o mstcMoTiftp^-r^o -yy^t-z^oit u^Kiiiiio4ti 

ifc&L-fc&f;:, V"^4»5|cl 0 1f«ft5fc2 0 (DRBT-fT 9 **OBBE^ 7* — v>£ 

:ti-5B5ET?&So ^^S»*l 0 i:^-— if^*2 O0>MT?WU BffiEKBa-rstiMR 
20 ri^fl t <0 &th-f, 0 hisls"? ci-y-— 0<Z>|HK 3-~ifiS8*2 0 t 

o 3 0 ©IKJfc»tT, BBEKMi-SIKMStf*^!? £ 19 £it5o ~>>^ p 
if-/^3 0 aSBSE<Z>ft>fl*<S:fT3 r 0 !f*su-^&S#Ki^— 1f©«A 

25 ^T'fii^^tifM^ 1 0 4iz%>\,^X s mmJj^t Ltt'^aT/Uffilr 
. Plf— ^3 0 ft. a. — ifff^BB# 1 2 8 (djoV^T^. — Ifx-^^-^ 6 
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fg-t-s (i3o)„ 1/^*1 oti, d-^-/<3 ofcbzL—f<Dm?*-nm 

if-^^fflt, f ^T/HgffiE£?T? (1 3 2) o 

li^-f<?)i?IIt^^^t5 (1 3 2 0). H12 (d) 00 

5 iso$^t&$, tm^ntz&tt^. 

mm-f Z> (1 3 2 2). *A*^5d^fcLl^#*fctti«5ffi^HV^-e*)S*& 
£\ U^fi^tli, 11 2 (d) ©I®T'DOUBT*'^y$:I^L, DOUB 
Tllf^Vy^ P-fr— /<3 0(C^f=i-5 (1 3 2 4) „ Z<Dt%. l^*S*l 0 
ft. Ell 2 (e) /n°^17- KmiE^T-fc^t^^b^ffilSSr^^-t-^o 

10 i^fe^#ris, HI 1 2 (d) c7)OK7H^>^31^tfc^, T^fgfiE^M 
113 2^HTt^ 

*>V*Pif-— ^3 Of*, 0i»f)DOUBTfS^$flrt5i:> 

i7 - kibce & n 9 [z % a.— ifx- * ^ 6 o b mm \c &s & * & i& 

#U SBSEt*— *£f£fifc-f-5 ( 1 3 2 6). ~>V? dU— /^3 0(2. - K 

15 w&®&&td.w.-rz>mmn&o\z.v}Mik-fz (132s). 

tt, n£ 1 fcKM y^y^^M (1 3 3 0) , — KH*> yt-^a 

— tf*i85fc2 0 S ( 1 3 3 2). a— »f«8^2 OKI*, El 1 3 ( f ) 

■fmmm^zti, a-f^xy-K^A^ta (1334). 3.-^*2 

Ote, =t-—1r&Xjl Ltz/*X9— P-fr — ^3 0 UL38fi1--5 (13 3 6 

20 ) o i/^^nf— ^3 0«^--«*2 0^i£if Lfc/^?- K£Sff U 
!7- KrtSjELl^*r5a»£]£'£1-5 (1 3 3 8). 

*lslifcn^2 «t t) ^V^^StNBK (1 3 4 0) , ^ p ^ftttixfif* 13 3 0 

25 ttftltf, ^liE^W^ s/-fe-v J Sr^-~if^*2 0(w^fi-6 (1 344) c a- 

El 1 3 (g) (1 3 4 6). £fc»SE*nT* yfe — ^StI^HS 

*1 0CMt5 (1 3 4 2). Uv^5fcl Ote^*?— KfBBEi& s -C#fc*>ofc 
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r. t (1 3 5 0) , »Tt5o fV^n-tf"- '<3 Ofi, -3- — 

^--if^*2 O^v-^^ n^lg^^i^-TS ( 1 3 4 8) D 

^:*I7— KISUEtCiottS^^ ? — KflR-^1 3 3 8(C*5V^•r, Pi?— y<3 

ffijz l o K%m^r^> (1 3 4 8). ui/iffimi ote, ;<*v— h°wm&&#>\^ti 

in 12 (f) (Dmm&m^L (1350) , ^^^.r^mm^^m 
1 3 2&mT-t% 0 

m 5 \zmoxmm-fz>o u*swm\ 012 \fi>^T^mu^m \ 3 2^^^^<t 
10 „ mm&m^Mi*^tfMm&mmn*^^? p 3 otc3gmt-& (134 

^ tm^^sm^m(om^(Dmm 1 3 6 ^tr 0 0 

Hll o^^U^^e^M^^fiJfflpTfg^^Bs^w^^i 3 qZWlWT 

Hi:, u^^i o^^m L/cWM^ir^i^^b (1362) „ mm&mtm 

r^5ft«bte\ ^-#'^7^2 o^-yir-v^ rrfijJ3#fji£i@;L-o^-rj £fg« 

L (1 3 6 4), U-v^^l 0 <^-«*2 0 ^©F H 1»i/y^ n^ftl^-^-t- 

20 5 (1 3 6 6), ^(Dt£,^~^i&^2o\M,mmm&m*M7ix^z>^k 
Srfc^s, (1113 (h) (Dmrntm^^n^o 

t5o t-^P-tf— ^3 Of*. ^-f«*2 0(^ WM^^^tfa-ft^fltf^ 
^^fi-T^) (138), ^.-ifi^^2 0fi. p-^w^3 O^b-g-f+^ff 

25 $B£^t-T5 <t % iSt«f*ll 4 0 £tT5o 

HI 1 1 miL/i^b, IIt«Itoll 4 0 *mn-fZ> 0 n.-if^^2 0 

w\ ei 1 3 ( i ) (Dmm&m^ lt. mn&n&m&it^-rz (1402) » ^ 
-1f{i^S'^f^-^^IEuv^^^^^^ftmL (1 4 0 4) , iEmti&mm<Do 
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3 ( j ) OjliciSricTFL (1 4 0 6) % *\ V-fe/Hf ^ n-tf— 3 0 

5 SHTtS (1 4 0 8). nlJ— ^3 Oft, a-— «5fc2 0frb*-Y>±/l' 

m^r^mir^ts ^vmrnz^^^^Mt^-^mt-t* (1 4 1 0) 0 uvm 
mi on, mi 2 ( g ) ic^-r, ^{cto-c^^^ir/w^tt^g^^ 

**1"5IIiffi£^H-5 (14 12) 0 p if— ^3 Oft, l^v^pfc 1 0 (C^r 

10 5(1414). 

m 5 <9 , iifnti 1 4 0 (7)^s#^^sii^^i^pj-t-5o 

2 Ott8IK^5fefg{f-S§-&v'^ nif-^3 0 [zmm-fZ (14 2)o p 
D— ^3 ott, ^-if«&5fc2 o^biSfHramStt^ir, ^-fpl 
x-*^-* 7 0iZT?±x IT, J»Rffif«*IB»'t-S^*0 ! S4rtf 5 (14 4 
15 ) „ W^7t5h ->y^nt-/^3 0it ^^T^^v^^l 0 (C 
«fSL (14 6) , a.— Ifj»5lc2 0^lR*Sr«ffi--5 (150), 1/»1 
0(1, ^^Ttfcrir^t, HIl 2 (h) <D®®^r^^i"6 (148) 0 

a— !f»*2oi4, w^Ttfcct^t, mi 3 (k) <Dmm&&&-rz 

(15 2) D 

20 ifS^&^&LJiOl&BJ^ifc^T, is^jr of- y< 3 0 ^^F^Tiifti 1 46^ 
-if$8*2 OW^-iflcP-r^-^^Mtttflg^^-ifx-^^-^ 6 0*»lb 
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£fc N nf- ^3 Ofi, O/i-b^D^pOJiA-^f+^SM^^if L 

i^«&5fcl d^^ff tfcUv?#f|j:, u^Hfelcl 0 OaS^lftiiflHFB 7 0 8 

wjjSv»-r« w t &tj:< i od»e>3.— »f«a*2 o — 

0iJi LTM^iiftSfl^ U B 1 u e t o o t h*S;©J;5 4, ^^mifffl^M 

^136, fc^fflLSl 4 4£>M3g^li, *>^niJ— /*3 0 MM 8 OX 

1 0 fab<DT ?±X$:is 1 0 2, l/v^m^l 0^(7)l/^iflfil 0 6, Uv?Jg 
0— (Df^? nff-JHBfS 1 1 8, W-^flS^l 0^a- iftK^JtiiHfeiBflr 1 
3 0, 0d»5>K>JHK^*ffif*Rgflr 1 3 4, &$r5£Ti§ft>l 4 6 
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£fc, ->V^ 0-9— Ori^— «*2 0 itf 9 7*— * Site 
#s*2 0^bOUv ? #-^-§:'fil 1 4,3.-if«8*2 0— (DU^^tt^gEitl 2 
2, ^--if^*2 0*»5>W^^Jft5|5l»«j4Bm^-Sfil 2 6, ^— «*2 0- 
5 (D&$r&&tttn&i$ 1 3 8^-«*2 Od^^J«H*^?t»fS#S^l 4 2 
, 3. — •7 i C^2 0^<D£|l&#i§£fl 15 0 ©^111, v-V^ p-»J- — y<3 0 <7>|& 2 (D 
i§{f£|$8 4 ^frVo 

10 BIESrfT v r. k&X% Z> 0 ->^f o^/v^BSE^fc&l^T, ^—fte^—fy* 

>^ n-tf- — 3 0 fit, : ttltb(D&mffimv> f Pfrb— i&?>jfJ»\Z.mx?s ^(D^ 
# a IMS 9 , 7 V ^ A iClflH S *i 5 ftyg LT jE t < ^ £ 5 r t & 
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(nwnffitem) 

io BUE^sucg^i^T^-— if fc-wiELifco m2<nmi&j&Wi-?n. if Hitter— 

»j£<Z>BIE#5*;£ (cS<5^T^--if &BSEi-6#5*;fc*J£-*-3-&a s $fS 1 ^HJS 
@14lt l/^x — i*^— ^ 5 Ol£*&*rt£ftfcl'^0B5kffi$8 6 0 0 0©-Caj?r 

15 ^-ria-e&s. i^^**ttr«6 o o ottti/^is* 1 osriMtsi^^aft** 

^stasteifaSftS, BIE^sS fife W=.T 7 — KBSEOffi 

jj&fto i i^^^^tL-CV>^ 0 mi 9(4, l^«&;fc1ff$R6 0 0 O0>BSE:fr5£tf> 
£ *L 5II*^^J £rffcBJ -T 6 0 T? *> 5 . /bmiS 4 1/ v?*S 
20 3^1 0*s*t^i-5BliE^^ U-C, BBEftU tr-i?3. r^BBE*fctt^^ 17— K 
fSIE, fv^T/i-BfiEO^ !7— KBfiEO^ % T/vBliE^o^x 17 — 

KBSE&4?, fc'v^T/VBil !7 — KBfI<7)^ft< t i> 1 oSrffii^fcBBE*' 

H&VBfe-rZf-tyvm, ^EM^IH^fct^»il^RW±-e*)-5^b> tr^=.T 

25 if, wm^ti-s-s^-c, BtE^^^asx-s^^r^^^feSo 

HI 1 5 {4,^-— ifv^— ^-<— ^ 6 0t£*Mrt£Jxfc^---!fflMR6 0 l 0<D—M* 

^i-E-e&So a— ri»«6 o i oki*, a— »f«5fe2 o 05 j.— if 9&*zmmm%r 
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i/jruv/uAuif 



£*t& 0 tfwjRi4fflr*tt,.jRttfli*7 7-<^6 o 2 o»c»«$n, ^-ifo 

«^&j£0*ljffl#tftl4, flj«7 7 ^^6 0 3 0{C&*rt£;ft„ a.— »f^s®i- 
5 ZmsiE'f — ? ItWUv*— ? 7 7 4 * 6 0 4 0 K&#3$;ft,5 0 

ii 6ii mmumy r 4 j\s 6 o 2 oo-M^tEt*fc5 0 ^-ifoft£, 

t£53'K ftgf, *B3lfc^#ftlft$*L5 0 mi 7 ft, %mttU77-(*6 0 3 

10 8 fit, BSE^-* 77^ /V6 0 4 0<7)-F!l^^1-|HT*$>5o f&SEx-*tLT, 
^-1ffc*tti&sfcoTi*5ffitR£g®i-S. fcixfcf, ®.3:<d£wl &m<D&ffi. 

, tztx.it rhteti<Did&&Ay<Dm&i-±ffix*irfr t ? j rot 5 ftjrP^&^-ifui-f 

HI 2 0f4,^-iflff8 6 0 1 Q<DWmJj3:<D7 K^*jW$n5BH^ 
(DMIrl^P^i-50Tfc5o^--if*fc{i3--if^*2 0 i>mfe-fZ>mu.ttk L 
t\ ^-T^U 1*4, fSKif^&L-efctK ^^«S5|cl Od$tt3£i-<5B 

SEfriWB^IbtlSo ^-f^U 2 14, /*-7sV— KBSEii^P"Cfc "9 , 3.*-if#&1* 
20 ^*!7— Kte«fc5BII&^;fc^*£t;:;fll>5 0 ^-f^U 3 tf^T/HBE 
m5T*9,*-1f^^^&S#lc««^-^K:J;5BIESrfTfc> J &^< 

^t-fflv^ 0 *^u4f4. Dits^«i^fet^rf5=pReiL±"T?fcs^5>. 

- KBBE&&T ftv\ ^Ha*t-<£>^§#f4, BSE*§3££ Lfcl^fc fc\ NtX&fgK:£ 
25 0 2 1(4, Ui^£*l 0#»£^5BIE#^£3---1f*»*2 0 #*g£i-*BlI 

BSE^^Hjg^fft>tL5o ^--if^BfE^^Srjt^iir-r, 0#BIE 
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T J: o T ^ — If £fg§El- 6 r b & m L V \zs< * V - Kf&KE £ *? 
if^^HTj^^rlt^-ar-r, U-v^Tfc 1 0 y — KSBSEtf>^£r*&^ Lfci&<£\ 

x-?^!7— KWBEdS* blzftibtLZo 

i oast* i/^Tfrmm<D&-&&i£Ltcm&, \f =^t /vmu.t ^ ^ v ~ \?mm<D 

ft 0 r b & m& LTl>5A^,^!7- KISSED fc* ^a7 A-fgfjE £ U^t> £ ti 
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— tfri^*? — KBfE<E>i£2JD&Jg^U U 5^**1 0 7 — K»SE0>*4:fll 

!7 — KBfE<&ii;bD£*gJtU Ui^JS^l 0# tf^3.T/WBBE*»oy"?^I7 
- KBBE£*f£Lfc*§£\ i^S^l 0 fca— r©M-CR*i-5BIE»«as— S: 
U tf^^T^Hi^xy- KBBE©Pf##IIBBK:fT*>*L5. 

10 ttif^a.T^BfE*g50K;3&3:fT5 ctia 0, 1 0 

BBE*sff*>tLS©4r«5i-5Ci:*st?#*. ^ — T/UBSE 
^SSL, u^«S5fel 0iSlf^3.T/i'BIE*fctt/^9— KBffiE£*§JtLfci&£- 
, 3— iftfSt*^T/wBlE£M£#v^c#\ ^*!7 — KBfiE<D*as2l8RK:fTfr;fx 
6 0 a— 1f#lf^a.7VMBIiE«rJg5U Ui?«l5|cl 0 & W*. 7/vg|l©*t}t 

15 Sifci^, o t^-^©M-es*-r*B5E*:S:^*>»&v^«>» B 

—Ifast^a.TVMRIiESriESU u$?*5fcl 0jftS^17— KBBE©*«rJBJtLfc 
4§£\ /^!7- KBIE^HISlctt^n, if^aT^BBE^fTtJixSC: tttftv*. 
a— ifjflSif^aT'/wBBESrfeSLv l^**5fcl 0 # if i? a 7^SW»o^7 <7- 
20 KBfI£*§£Lfci&£\ 1/^*1 0j6S®*-f5 Vf^TABBEfc^— if #£5 
tSfcft, Ui^«8*i 0 fc^-lfOffl^BiE^W'&S^J^^iXJtev^fcje), B 

HI2 2lt*iWiWl^^riM^)»l©7P-ft - ht*$)5 
„ HI 2 3#><b|I|2 7«HJ2 2II*5ft5«! ! lWi|^i^t7D-ft- hT'£>-5 0 
25 HI 2 2&**fl&Lfc#e>, ftSF^aSrBiW-f-So /hTcJEK&^T, ^-if#Wa 

U %mte1rz> ( 1 0 0) „ l"v^5fc 1 0 tt«>y^nt-^3 0^ 
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7^t^f5 (1 0 2) „ l^$85fcl Ofiv^^^n-^ — ^3 O^T?±*^tzt 

5 (10 4) o 

ih— /^3 0 fit l^x — ?-<— * 5 0(wT^ir^L (1 0 4 2). U^IIffll 
^■S["t-5u^4a*<Z)u^«85|5tir««ri*aii-5 ( 1 0 4 4) 0 isitittJtiffima-i, 

u^»5lc^*S3fe-i-S»IIE^SC«:«&ai-f« (1 0 4 6) . l^VmZitf 
fa^-f SfSfiE^rUi. Hli 9 ic— fia|Sr^i-<t 5t-, irs^T/viME, 17 — K 

~>>^ p-^— x< 3 Ott. SBRl^flHfcl 0{£*fL-t 
15 us?#-g-Srfij?j l^T<5 (1 0 4 8). u-v^-^fi, mm^^mi Ofcztifrb 

El 2 2Ci^ i-^^W^hs^i o 4«w, e/^^u-y— ^^3 0^f£ 

0 — U$?#-§-£BBfrr<5#!.3 (10 6) % Uv^;fel 0^i/i?#-§-^ 

^^-rs&ts do8) , i-^fist^u^f^^-f^ ii^pi-5^a (i i 
20 o) , ^—^tmtoZfrtLi'ism^&Ati'tztiim. (112). ^---^^2 0 

^Ui/tf5:-/y^ nih— ^3 O^ISiSi-Sfea (1 14) s S/V^ of-— ^3 
0 ^ UTS^t5«ii (116), ->y^nf-/3 0^^^ 

PfB-^SrU-^^ 1 O^-ftm-fZt&m (118) % O&i/ls* 
£rSffU l/^*10©v/y^n7y/7 0 6^T^5iI (120) N 
25 v->^ nif-^3 u&mbZfrtL®.^ ^--ifC*2 0 ^ l^«8;feft 

^ssriam-rs^a (122), =-— -r^^v^ p Lfci^tt^KWitw^a^ 
9^flsssi-s*aa (124), &o^-«*2 o^^^^*t*#5smm-^-^^ 

XjJ'Pif— y<3 0 (c^f-rs^M (12 6) Kio^ftt, IE!5lc^Lfc^l 
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rv, i / jr i/u/ui-ui 1 * 



m-tZt, ^--iftf#BS#l 2 8 0^S^tT3o HI 2 4^#H5L^^b, ^--if 
1 2 8 0M9i£!&BJl-f 5„ pf— y<3 014, ^— «*2 0 <D^- 

5 -1f^#^-^^t±}1-5 (1 2 8 0), ^--«*#-SH4, a-«*2 0^ 

1 2 8 2) 0 ifx-^^-^ 6 0{C^~«3fc#4§-t^j£<Stt(b;ft,5^-- f 

mm^^E-r^^^m-<^—^mM2 o^— ^s^ft-cv^^?** 

10 £!£fS-f 3 (1 2 8 4) 0 ^--if^^nrVN^ftnii, ^-1f$«2 0^ y 

ir-v 5 r3Bi£*L-ti^i±-A,j £3§<f-t-£ ( 1 2 8 6) 0 ^-tm2 0i;it 
^i o^-f«*2 ow^DttMiL (1290), mmzmj-f 
15 ^.-iF^^^X'^^^^-ifx-^^-^e ofrh=>-— fmmQ 0 1 

0§r^tbi-5 (1 2 9 2) . 01 l IC, ^--1ftff^6 0 1 O^fl, ^- 

20 ^^i-sfpiE^&teffii-s (i 2 9 3) 0 a--? 20 t>w 

nEttt LX&fe-tZftmit, HI 2 OH-i^^fJ; 7- KISSED 

25 s-^vnt^.— h*- b^tntmnx- b*tet'<Dmmwimzfflm& 
ft^fr£?fr&nm-rz> (1 2 9 4) 0 fijffl^&f^M^fr^^te, « 
^2 0^ y-fe-v? mmvt^itAs} zmmTz ( 1 2 9 6) 0 jf$a*2 
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*10 fca — 1f«*2 0(Z» n#fcg£#p|&L ( 1 2 9 8), ftj.aSr3lftT.i-S 

o 

5 0D'g-W-Sr-g-tr»H^*fl!ra«rS'fS-J"« (l 3 4) o ->y^t-A3 0lt i/^ 
^ n-^/i^fg£Ej laoX^- ifME^??? (1 3 5) 0 r^>-^ n-^/l^fME 

j i-o^Tf±. m 1 (Dmmwmx'&^tcmv x»hz>&, ^mmnmxn. 

«S*1 0 £3.— if ^2 0 <t^g*-r5^IJE^-iC^i^^$-fr.-&mT'#-5miIE^ 

hi 2 5t#Rgt*^f), ^-if^iEi 3 5 (Dfamzmw-fz* ^^?u-V—/< 
15 ^kicm^^^x, mm^ftioftzwmjj#:&&:7£'tz> (7000) . 0211c- 

mmtm^zn (7004) % t&mtmT-rZc ms-i- 

£\ «II7 0 0 6t£ii*, ^^^ttfc^SE^r^icS^^T^-— -m5E%fT3 (7 
0 0 6) 0 

25 2f5£<h Lt Z*V~T/\smm&tHZ'<*V- K^HE^ttfctl^tT^^-— tf««BS# 1 
2 8 (C*5VNT,^.-if^ 2 0 365tg^-f-sa8BE^t Lt/^ 17- KfgtEiiADtf* 



T » V-J Ul/V/OU / 
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»5E;fr 5£fii bf =l T ;i-mmfr^/<* 9 - KBIiE <h ft 5 e "T ft *, f ^ a T /vf&SE 
5 0?5»b3.— fOM^-M^-fZlfoft-tZ (7 0 0 7), O^uiJ— 

/<3 ofii^^* i oizm^ntoWMLT-f&mmi-z (7 0 0 8) o 
ion &y—s<3 ofrbgmvtz^-^<Dm^nw&*m7F-tz> (70 

1 0) 0 UiS&m&ltx.—tf tmW-Mk&fLtt^, *A*>if 9^Sr?*»"t5 (7 
0 12) „ *A?1^?»UV^ l^&^Ojg^fcJ; <9 , 1/^*10 

io izmm^t yt-^^y^Df-/^ o{cig{sL (7018) , mm*°ix 
h&zk&wmizm^-fZ) (70i6) o ®?na u^A-efesi ^ ^^lue^ 

^ tz^-rm-^Zi/y? tnf-s<3 o^mmi-z (7 0 1 3) 0 uv? 

15 ^30fi % t^^^T/^fEOOfiJc^^^-rm -^^I^^iffi^l O/^ibgff U^°*17 
- KiH (7 0 14) ZffVo 

H2 7fi, xn^!7- Kt&!E7 0 1 4M07D-ft- bTfe-So iX>^o 
f— /^3 Ott, /n^!7- Kfg5E£tT?fc#>K % ^--1fx-^-<— ^ 6 O^ibME 

U »«E7 f -*«rfft*-t-* (1 3 2 6) . fgfiEx-*te % 
20 IH 1 8te— fll&^LfcJ: 5*^-1fi6S«»U/t«IEl1(f«fc«<5v^T,«ftBIiEn!f 

ft^^6^Aif^T&S 0 *fe^-if^^bfcfg|E^25S7V^A(c:^fmT 
SCR3£*l5£:«>. KiiEitffids&StfC^ffl^tiSRrtgtttttev^ ill 3 2 8^ 

25 C-CfcS^ib, R^^fBSfS, 

0 2 2|:loT^f5„ d-9— ^3 Uv?«* 1 O^bSmtfc 
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t>«fci\, m^&&kmmtim&<m<Dm&(Dmm (136), o 3 0 

*ft0&m (14 0) N ^-1^*2 0*s»II*J*flM8fll*«r^^^ o 3 
5 0HMt5^1 (142) % 0-^-/^3 0*!^— 1f«*2 Ort^ffllKft 

*$4*Kf§-§-£:gteU i-fPlf-^^-^ 7 0 H7^t^ Lt, jftXtiMl£r 
iBflfc-t-S&gr&S (1 4 4) , u*}—'<3 0#fci&^Taifc£ 1^*8*1 

0 }d^{fi-5^gl (14 6) , v'V^ □ ^3 0 #3- — ?j%j£2 0 
Hfg-t-SADfS (15 0) , l/^S* 1 O^^^Jilg^^tS^l (148 
10 ) , St>'^-fS*2 O/J^^TliE^^tafel (152) (COV^f*. 

7 0 1 4 0ftlgl* s fft>tb5 0 
20 v->^ n-^/u5=-S!ElwS<5< If WiE 1 3 5 cr>m.<nM& £ G>{^fft91i-3o \s 
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p. 

_bfE<Z>tft93t?«\ r-^/^ISSEj O— IT, tf^3.T/P»|Ei:^^l7— K 

*i"SBBE^i:BIIflWE, ^^aS^/hSB^dSJf^i-SBBE^^BiEWflE 
SriiST*£5 0 B»R^0^«toTB5E^S:^IE-t-Si^*ST?tS. 

*&m<om 3 w^ite^flgom^sr^x^^ovNTBiwi-s,, $ 1 2 

0 b=L—VM5i2 0Olfi^|?!fflU 0 ta-— Ti»5t5 2 
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si i &t*!& 2 commMmt ttifts, m i xt^is 2 (Dmrnmrn t 

5 02 8 11 l/v 5 ^* 1 OOMB&BlT'fcSo fl l^S^^JfeTMirtigft?) 

^ — h*m&~MyU7 1 Oil rL— tf«g5|c2 0^^g&8 0 2I^/Tt5^' 

10 HI 2 — if«S5|c2 OCO^^^|5 8 0 2 iZs<— n — KtfiX** $ ftfctfij £t&^ 

^^-3— Ktfilti^8 0 2 izm^-t^ 0 ^NflS8 0 2 Jdfi ri/J?ta 

15 8S5fcl 0©fiStfi^^-V3 - KSIt^&9g|S7 1 0 SrfflV>T3.-Hf«ft*2 0 
tf>^**g&8 0 2 3— K&HWRtj „ \si?i&$z 1 0—&§lt&SiJ# 

-*5-£A7j£i2r5o 3-— ff^^^JBJSl 0^- ^ = — Ktt^«l«?«S7 1 0 

20 El 3 Ofl^.— if^*2 0 0>^^g&8 0 2 KHJ-f^— 3— K#*S% £;H;fc0iJ£ 
B£ 911" 5 BIT?*!) 3. =l— |FiS5fc2 0H v-^^ nf- ^3 0d»P>SflrbfeH5iaR 

2lC^^-T5o VS?«&5fcl OO^-ya- KSIi^EE 9 SP 7 1 0tt^^$P8 0 2 

25 — Atf-fZo 
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1 Od>t>®^&gM- 3 .-£ii&u u&:&&ffl1ttii-fZ> (100).a- 

101). !f«S*2 Ofi^V^ ay—'<3 0^T?±X-t& (2 0 2) 0 
f§#^(cS^v^-c, ^-iftf^^M#i--5 (1 2 8) „ ^-*fffi1&M£ 1 2 8© 

fttsttisi *fc(iM2oiijfe^^^(^c-efc5^ib^K^*is&-rs 0 Pt 

«^2 0^m-T5 ( 2 0 6) 0 ^— tf^2 0 fiv-^^ nif-y^ 3 0fab% 

8 0 2izm^-fZ> (2 0 8) „ ex— f (i^--«^2 0 cD^^g|S 8 0 2 

K£Uv^7fcl 0©S^tiI^f^ (2 1 0) o Uv^^l 0© 

8 o zizm^ztitz^-^- Yzmth^Z) (2 1 2) 0 ^^nfc^-^- k 

— 1fiS^2 0 ^M#fc^§IB3cBiJ#-?§-£: nf-/<3 0— (2 14) 

timSr^-TS ( 1 0 4 ) e l^«&5fcfl*«JlB# 1 0 4 W^Ste^ 1 2 on 

£teUfcIR5l»BiJ##&l8te-f -5 (1 1 6) 0 

^^ttbttSl^^jS^l 0<!r^--«^2 O^T'l^lO r^y^nj 
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^5l«»J#*tt,R5l«sy*#iwJ:o-C«IISiJ$ixSSi3l*rfi 1 5 i^^ffi^l 0 <b 
v-v^ nif— /<3 o<75 rr^-t^^^j ^iii^^AT-) MS^ft£;H, 

o 

0 3 2£r#J8L&j6Sb, U-v^##fiB^l 1 6(D^S?rIftP^-r^o El 3 2 {^*5^ 

?±xtf$>V), L-«l 0^bH5iaS'J#^^f Saxfca^^SrW^ (2 
20 1 6 2), fcLT*-fc:*aS*tt*Ltf* h CDiS^U*^ U t* 9 

*>S:W-< (2 16 4) , b^^T M«*Wd s »iflb^:»^t4, ^— !f«B5fc2 

o t<D&m*mm\s (2 1 6 6) „ ^Tts. 

r^^^ n^-fcj. ^IBwj-— 1fJB5lc2 Od«*>5 36»ir5 3&»P'< (1168) , H 

25 ^ittLtf, ui/y&Mi o^^m^m^m^^^-^ y±-iszmm-tz> (2 1 

7 0) 0 l^^l 0fi5l§llll5SiJ#-§-3i7 — Sr^-MfffiSr^^i-S (2 1 7 2) 
o Uv?«^l 0(Dfi^fliff^-3 - KOtt^Si 9 £fr 5 (212) „ 
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. i^ss^i o t<Dmmk=>-—fi&m2 o ^^iiftop^^ts (2174) „ 

1^3 1 iclot,-^^ n-^— s<3 OUt^f? nft-^-^r U-v^ira* 1 0— ^ffil" 
5 (118), U-^fl 0^i/>^D<ff$rSfst, ^SjfelOO'^ 

^ p 7 7 0 6 ^r^T^f (1 2 0) , ^ a if— 3 0 ifi , "s^st 

v&mte&titz&^ o^^vffijiffin&mis-tztem (122) s 

3— ifds^^^ p Lfci^SB^lcPA^v^jrv^^ 9 (124) % 

10 fel(12 6) , >yy ^ n f-/^ 3 0 ^ 1 0 ^ bil^i^^Sflt 

s&s (134) % n-^— /< 3 0 \z "fmmt&m (135) , >>- 
? a^—s<3 o\z&zmw&mkmm*sm&8i<Dm&<Dmm. (1 3 6) x 

u-^-^3 0**^-— 1f»*2 OiC^fh^it^^^i-^MS (138),a- 

if«*2 0 tmm<Dmmmm^n 0 (140) % if ^2 o*iisi 

15 ®ffi^Vy^ni)-/-t3 0 (C^jf-rS^SI (14 2) „ ^i/^ n-^ — y<3 0 
l-J:5^fei (14 4) % oif-^3 0#fc#^TiI&£ 1^*8*1 0 

\Z.mm-tZ>*&m (14 6) % P-^ — y^3 tf«g5|c2 0 I3£f|l&»£3§ 

m-rs^jg (i5o) , is&ffi-tii o^fcffiZtTwmzm^-r&i&m (14 8) 
, Ru^-—f^2 ofr®:ffi^7mm*m^z>tim (152) k:ov*-cw\ 121 
20 2 2K^vfr$&2(DmMmmbmcx*fozfrbs!iim%mv&'rz>o 

#-§-*r^— = — h\ t^^-n-KfW/^-yn-KT'^lfc^^ 3-—- «f*B 
^2 O^^iSSiilf fr^tf>5fciI<t#l8:-^B 1 u e t o o t hftifOift££8Stf>iS 
«Sii«^SrfflV^T, i^SS^l 0£iif§U IR9l«»J##SrU'^«B5l5i O^iH 



25 fiLttJ:i\ 
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J£<5tf ?>nfc3.— »f«t5|C2 0 £ V^#&5|c 1 0 b<DmX'&:ffi&ftt> 

(I4<DW1) 

LT©a- if^2 o b, &mmw<z>—Mb uovy^ Dt-/^3 o 
15 f PJir-^^-^ 7 0 t ^tt5 0 

c x- *> s a> e> k w & m§ -r § o 

§^^>-9 0 0 n*&ymfm9 02 b, «#&A&-rs==-r ^if a*&9 0 

25 <z>iBg§r^-r3^S&9 0 8 i: , ^offi^^tsi^^ y 9 1 o 
b, m^-^(D^-Yly±ju^m^-t^^-^>-t/u^^^9 1 2 b&m-t&o 
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®7n-ft- ht'fc5 0 HI 3 6(i, ^— !f»5|c2 0 (DM^U 8 0 2 (7)®®«rtjT" 

HI 3 5 £#8SL#riSe>, ^^MS^I^0Ji-5o ^— Fte, ^-ffi*2 0Ol 
-^&#F^ ~^-£il*RL (4 0 1) , i»IS5cmi 6WFW^y9 1 0 $rjf I 
x W. s f-1k&&&H&-tZ> (4 0 0) 0 S*bJ&?c1&i 6 te N yy^nf-^30^7 
^ir^-T5 (402) o ifblg^flfel 6 IZis^? n-tf— ^3 0— T^i?^ Lfct 

v^>-^ Dif— ^3 0fig«)|£5c^l 6 ^bWT^-fe^tCi^CTglblS^ai 

i?m3fctim&m£t-tz> (4 0 4) „ i^W;ftfttti&£4 0 4^^-iftf$gBS# 

4 2 8 ^-ec^MSfi, HI 5 \zm l/c If! 1 wiiM^w. i^as&^lf um£ l o 4 
^^^--tf-ff fg0g# i 2 8^T'(D^ia<ir|HlLT'fo5 7!»^blft^^*IB§i--5o 

fl£^cift^-£3§<f-r<5 (4 3 0) 0 gibSg^m 1 6 ttv->^ n-^— ^3 QfrhWM 
^^S<ft5 <h , — ifl-glblK^-r^bttTVN^^D^^iltR^-fr^ (4 3 
2) o ^ — if^^a^^-^-^ £^ gfb^ai 6te>-^ 0-9—^3 o-.il 
^gtfiNB£3g'ff1-<5 (4 3 4) 0 

^M^tl<b^Jffl rT^^WBS^ 4 3 6 OMl^f)^^l4 4 4 ^-C(ilU5 

(c^ltc, mi (Dmmmm(o^ mw^mtrnm^m^m^m^- 1 3 6^^s^ib 

c-tf— ^3 Of±^^3®4 4 4 7WT-T 6 t,^^Til^^g»M^ 

Mi 6^a^p-r?> (44 6) 0 ^mmmmi 6« s ^-if^^Lfci3!,&£#m 

(4 4 8) 0 d-^— y-t 3 0 &ffi£,<Dtt&(Dmi&$:^-fmi\Z^$:^' — *F 

t^m2 o tciufg-rs (452) 0 3.— if ^2 0 ffi&um&mm-r z> (454) 
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, i-^-CiimiU^l 8 LTtT *?tLS, tf«»5|5 2 0 £ P-fr— ✓< 3 0 

roiBjoT 5 — ^o-^o i 9 t±.mmmiBmm& 2 saints 0^3 8 &ifr\,xnt> 

5 V\, 

gtblS^^l 6ri»<b3. — lFi{g5fc2 0^OUv/#^-<7)ii^P (4 10) l±, SftlS 

10 g^nt tdj:ox, gMfii 6 ©**i»iMasa»e>^-'— - 9-^*2 o©m 

Hiim^8 0 8 — Uv?##£i£f3 Itt J:v\ rfriK £ <9 , ^-flii"^lf5; 

15 g&SrWU B 1 u e t o o t h^W i 5 'i, HWffl©liIft^l^t ( 
^WiroS^^^rAt'li, #1, 12, 13, %A(D%mm^t\t 

20 % ffi&(Dtt&tf'p%ixhz>titb, ^-^*mm-tz&m&&'J>t!:*<^bx*foz>o 
^ — if % ifcsij -r 5 w t & x # s CD -c\ 4>«g& m& iz^—tfowmmmzmm 

25 &:#r£:gic7)*/K JK «t o T , f&fS;fr5££rSltR-r -5 r i: #T*£ 

■So 

(M5cr)H»^) 
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1 2 ^L^McD-mt LTOa^f^2 0 <b % 8:gFl£«tf)-£iJt U»i/ 
^^cr-^w<3 Oi, drtU TU— ^4 Oi, If *^^^-^-<-^C0-^ t L 

^^-^60i, — if Plf- y"-<— ^ 7 0 t . is 3 >;/ t°^^1f — ✓ < 2 4 <t , 

-> 3 ^/ t°^f— ,<2 At%^y$-*y V 2 6 ±-Q<&m£thTz.*>7'< yy 
3 >y t°>^Oif-y-<T'fc5)„ ^--if nVfc'^ — * 2 2 (i, 7 F 2 6 I: 

&m-tZ>^ — ifc^^^t 0 ^ — ~>3 y t°>-^^— ^2 4 (CTi7 ir^ LT 

5o y 7"f— x<4 OI4iifSIUjjS3 8 l;j;ot-»^ c if— 3 0 t&Wt-fZ> 

i-BBtosflta^wu, 3.~if«8^2 o ©affirm j: o -c\ Bh&Btsio^&fcH 
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5 WT. HI 3 8 5^61214 3 SrfflV^T, $HIii©l^V7T -MC*5^T, 
a— ifj&Sa — iFC^&JBl^T, «^&#F£*T?*Q!«iB©&^-t\ 1213 8*4, *H 

1214 2 {4121 3 8 n— — hX*&Z> 0 HI 4 3 f4, 3- 

10 a-— if« N 3- — If = yt'a- ? 2 2 SrffiV»T>T V^— h 2 6&cj£j£L. «< 
^ — ^ jy h 2 6 ;y t°>^if— 2 4 l^T^ir^ U >frV7>f 

^~>a 5/ bT^^SrtT^. ^->"7^ >">3 y k°^-C{4. v' 3 y \?lsy*-*)—s<2 4 

fg D a pOjgtR^,^t3-5 <t „ 3.-9* 3 ^tTa — * 2 2 Wf> ^^l^TMffifiltt, (214 
15 3 ( a ) © J: 9 il^p°p«rt t i: ^M^t^ UfcW e b ^-^^^^ ^ |l 

rtW6£H-5 (5 0 0) „ a — if = ^Ifa — * 2 2*4, U-^t^l 4— T^-ir 

2) 0 

20 Ui^if— y<l 4 (4, <RS^«&5|c*:jeiM-5 (5 0 4) , lil-^f 1 2li 

o 2f4, -/y^Dtw<3 0l:git, ij!«5l&B&S'J-f 

0U^fc3 ^##£r&J£U -»*-n 3 (5 0 

25 6) o 

»^ Pt-/<'3 0 »4iK& 1 2^bWT^ir^^C-C{5®V-v ; ^ 

fc, W^ffif*S:Bg#i-S (5 0 8) 0 1213 9 tt^5?ttf«flR^ 5 0 8 <D^M^^ 
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ui?y—s< 14I4U >-?mn*YEf&L (5io), v ^?ffim**-—?=i>t' 

^■ — f 2 2 (Ciaff-T^ (5 1 2 ) o a- — if 3 >t 0 ^. — ^ 2 2 0®ffi(C(i N U-v^if 
5 4 i©3^1t«toT, IH4 3 (b) ^^-r®®^^^^tL5„ a- — If 

2 2 £ 1/v^if- y< 1 4 tW^ftiatCOUNTti, CGI (C o mm 
on Gate Interface) &m </ >5 r t ^T*# 5 „ g| 4 3 (b) Id 

l 4f^tc$)5^i®^v ? ^i 2— <d ry LfciSot, 3. 

— ifd* r<>y^ a ^^If-Tr -JrlCfc «9 , ^.-fnyi^a-;? 2 2 f±U 

v?if-^ 1 4ftcD#3£<D{5i®l/> ? ^l 2 t»5^t^T^5 (5 14) „ 
cx— if £5 r-/v^n^j sJf^>-4:*fi-i, ^f 3 yk° a -^2 2lt <ES 
15 i^#&5fci 2iiiU !) ^^1»**Bflr#«rffit«li^^«l5fel 2-^{f^-5 (5 
16). <R»^^*»* 1 2 tt % i-fnyfa-^ 2 2 75>ib U ^fflr$R«t&{S-i§- 
^^m-t^t, &{£!£^Lfeu^#-§-^-lF:3>-fc°^-* 2 2{-38(Si-5 (5 
18), a.— if =*>-fc 0 ^ — * 2 2 fi, <RS^^«&* 1 2 A»P> l/v^-^^f-TS 
^ 043 (c) ^^-TJ: 5 fc, »>ifO?-f >- W&UWi&fl. \s*?-f 

/T^t^^tlS (5 2 0) o 

a-fnyfa-^ 2 2«. ui^zf 7^-^(0^^^ h^^zu^^-^^-t 
Si<b{c:=fc ^--iftcuv?#^-^ii^gi-^r £#-e#5 (5 2 2) „ ^-iffcfc 

25 £ N cx— Hftt}^2 0tA?Jt5 (5 2 4) „ iPig* 2 0 J±, if ^A^» L 
/c ■U->f##4:v'^^ uf-/< 3 0 icmt-tZ (5 2 6) 0 

^/y^pfwN3 0tt,^l5 0 6 \Z.t3\,^Ti&mUi?1ti3fc 1 2^-b^{f Lfc^ 
^#tt,M-! 5 2 6 5' jo^T^--if^*2 Ort^gfi Lfc <b&f&-£L 
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, u^#-§-*s— sfeLfcii^^. fomisvmmi 2t<Dmmt, ^-—^mmzot 
m&s 2 8iti7 n^u^, fg 1 onifi^Bgou^s^-Bs^ 1 1 6 t m ct'fc 

2{dia{fi-5 (5 30) o (Kffli 1^^**1 2 fit. ->y^ pft-^-^v'V 
* pif— 3 o^f>Sft-f--5 <t . ^— 9*= yfa- * 2 2 ofi-^^fs 
1~<5 ( 5 3 2 ) 0 i-f^y t°^ — ^ 2 2 (i, v^^fc 1 2 a>e> v-^^ pfS 

10 ^ 07 ^:T£r 5 ( 5 3 4 ) 0 r ttfc «t «9 , !^tt<K3B u 5^*8 5fc 1 2 <t 

is is? vy--s<3 cm, us^m-hb^s 2 8wMa^#, cx— ifmnm^5 3 

6 N z^y — Kf&fI5 3 8 £rfT9o 0 4 1 Ufc^- — if if $&88£r 5 3 6 (D^S 
15 ffc91£r*l&-f-5o 1214 2(^^bfc^^!7— K^IE5 3 8©*IIIi, HI 9 

T^bfc, ^ i (D-mm&m<r>s** v — k^se 2 1 o^mmt, ^is^r^m-u^^ 

Ufcv^fl.«\ PID-CfcSd*e>, tfe0J^*B&-r^ o 

✓^!7- KMSE5 3 8©^!©!, ct-y—s<3 0 fit, JlffW&SM £ fUffl"^ 

tg^OBS^ 5 4 0, i££r*a3g 5 4 8 <7)fHim^m\ — 2 0 

20 '5fcB5 4 4©M4:fif9. r ft <b Oftt3ffltt, » 1 (DUMMM t Wi CX*fo S ;6><bl£ 
93 

t3f— ^ 3 0 tt^Ml5 4 8 <E>*0f3tf>&; ifc#F^TiI*fl feiSJ® U 
2(Ij|<fL (5 5 0) , fPIHX#&^ — lf«*2 0 imtt§ c tikv?«* 
1 2li^7i^EP^->y^ p 3 o a>£>Sff-r<5 £ s !f = V fc 0 ^ — ^ 

25 2 2t£&gr3£Tii*fl£i£fS-r3 (5 5 2) 0 rt-nf 2 2te. * 

fpi® I'&^rtf^T bTcr t &fc*L5^£tr 5 0 -ftM <fc K> ^—*fl*Um 
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*MI©if^v/^T A id J; tttf, 3- — If # =i > H'zl — ? "Cf >- * ~ 
4 >$—*y b±<Dst>>7'( ^iss y t°^^(CjoV^T, V l^v 5 ^ — K#"f- 

&(Dmmt, j^?-*y k±tit^\ tt&»&^(iiit^mi£^£ffl^T, ^ 

Ml, JfT2, ^3, 14, S^SWMlWtfM^fAI^I^, 

«fcV\, H14 4 «\ tRfflrr >b°^ — ^ 6 0 Otf^N— Kf>^T«^c^^i-^'n 5, ^ m 
■CfeSo H)4 4(C*5VNT, =>yt°a-^ 6 0 0li, CPU60 2ttROM6 0 4 
MRAM6 0 6 IZ&mZntz-rvyy MZ-^^^XW]^ ^>o A^gf6 0 8 
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DESCRIPTION 

ELECTRONIC SETTLEMENT SYSTEM, SETTLEMENT DEVICE AND TERMINAL 

TECHNICAL FIELD 
The present invention relates to an electronic 
settlement system, settlement device and terminal whereby 
settlement in a commercial transaction can be performed 
electronically, using a communication network. Also, the 
present application relates to the following international 
application. In respect of designated countries in which 
incorporation of a reference article by reference is 
recognized, the matter disclosed in the following application 
is incorporated in the present application by reference and 
therefore constitutes part of the disclosure of the present 
application . 

PCT/JP99/04178 Date of application 2nd August 1999 

BACKGROUND ART 

Conventionally, in electronic settlement systems in 
which settlement in commercial transactions is performed 
electronically through a communication network individual 
information such as credit card numbers etc is sent in the 
form of digital data through the Internet. If individual 
information such as credit card numbers is directly sent by 
the Internet, there is a risk that the credit card number 
will be stolen and used dishonestly. It is therefore 
necessary to prevent leakage of individual information by 
using high-level encryption techniques. Consequently, in an 
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electronic settlement system, there was the problem that, in 
order to improve security, a complicated authentication 
procedure was necessary i.e. convenience had to be sacrificed. 
Accordingly, an object of the present invention is to provide 
an electronic settlement system wherein such problems are 
solved and which is safe and convenient. 

DISC LOSURE OF THE INVENTION 
In order to achieve this object, according to a first 
aspect of the present invention, an electronic settlement 
system for settlement of transactions using a communication 
network comprises a settlement device that performs 
transaction settlement; an invoicing terminal connected with 
the settlement device through the communication network that 
performs invoicing in the transaction; and a payment terminal 
that performs payment in the transaction, being connected 
with the settlement device through the communication network 
and is characterized in that the settlement device sets a 
transaction identification number that identifies the 
transaction and, when the payment terminal sends to this 
settlement device a transaction identification number that is 
the same as the transaction identification number, effects 
settlement of the transaction by synchronizing communication 
with the invoicing terminal and communication with the 
payment terminal . 

The invoicing terminal may be connected with the 
settlement device through a telephone circuit or leased 



circuit and the payment terminal may be connected with the 
settlement terminal by wireless telephone communication. 

According to a second aspect of the present invention, a 
settlement device that, by communicating with an invoicing 
terminal that performs invoicing in a transaction and a 
payment terminal that performs payment in the transaction, 
effects settlement of the transaction is characterized in 
that it comprises: a first communication section connected 
with the invoicing terminal through a first communication 
network; a second communication section connected with the 
payment terminal through a second communication network; and 
a processing section that performs settlement processing of 
the transaction; and in that the processing section sets a 
transaction identification number that identifies the 
transaction and, if the payment terminal sends to this 
settlement device a transaction identification number that is 
the same as the transaction identification number, 
synchronizes communication with the invoicing terminal and 
communication with the payment terminal. 

The first communication section may be connected with the 
invoicing terminal through a telephone circuit or a leased 
circuit and the second communication section may be connected 
with the payment terminal by wireless telephone communication. 

The first communication section may send the transaction 
identification number that identifies the transaction to the 
invoicing terminal and the invoicing terminal may notify the 



payment terminal or the user of the payment terminal of the 
transaction identification number and, if the payment 
terminal sends to this settlement device a transaction 
identification number that is the same as the transaction 
identification number, the processing section may synchronize 
communication with the invoicing terminal and communication 
with the payment terminal and the first communication section 
may send a synchronization confirmation signal indicating 
that synchronization has been established to the invoicing 
terminal. 

The processing section may perform settlement processing 
of the transaction between the invoicing terminal and the 
payment terminal that have been synchronized by the 
transaction identification number. 

The first communication section may receive from the 
invoicing terminal the purchase amount in the transaction and 
the processing section may perform settlement processing of 
the transaction in respect of the user of the payment 
terminal, using the purchase amount received from the 
invoicing terminal by the first communication section. 

The first communication section may receive from the 
invoicing section the purchase amount in the transaction; the 
second communication section may send to the payment terminal 
the purchase amount in order to confirm the purchase amount 
by the payment terminal and may receive from the payment 
terminal a purchase final confirmation signal confirming the 
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purchase amount; the processing section may perform 
settlement processing after the second communication section 
.._ has ..received.. the. .purchase ...final jconf i.mation .signai_Xrom..thQ._ 
payment terminal; the first communication section may send to 
the invoicing terminal settlement completion notif ication, 
giving notification of completion of the settlement 
processing by the processing section and the second 
communication section may send the payment terminal a receipt 
giving notification of receipt of the purchase amount in the 
settlement processing by the processing section. 

There may be further provided an invoicing terminal 
database that stores information relating to the invoicing 
terminals; the first communication section may receive an 
identification number that identifies the invoicing terminal 
from the invoicing terminals; and the processing section may 
confirm registration of the invoicing terminal by using the 
identification number to extract information relating to the 
invoicing terminal from the invoicing terminal database. 

The second communication section may send to the payment 
terminal the information relating to the invoicing terminal 
extracted from the invoicing terminal database in order for 
the payment terminal to confirm the invoicing terminal. 

There may be further provided a payment terminal database 
that stores information relating to the payment terminals; 
the second communication section may detect the call 
origination telephone number of the payment terminal; and the 
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processing section may confirm at least one of the state of 
registration of the user, usage by the user and disposable 
funds of the user by extracting information relating to the 
user of the payment terminal from the payment terminal 
database, using the call origination telephone number. 

The first communication section may send the transaction 
identification number that identifies the transaction to the 
invoicing terminal and the invoicing terminal may notify the 
payment terminal or the user of the payment terminal of the 
transaction identification number and, if the payment 
terminal sends to this settlement device a transaction 
identification number which is the same as the transaction 
identification number, the processing section may synchronize 
communication with the invoicing terminal and communication 
with the payment terminal and the first communication section 
may send to the invoicing terminal a synchronization 
confirmation signal indicating that synchronization has been 
established. 

The processing section may extract authentication 
information of the user of the payment terminal from the 
payment terminal database and the first communication section 
may send to the invoicing terminal the authentication 
information of the user for authentication of the user by the 
invoicing terminal. 

The authentication information of the user may be a 
photograph of the face of the user. 
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The first communication section may receive from the 
invoicing terminal a signal requesting password 
authentication of the user; the processing section may 
extract information relating to the password of the user of 
the payment terminal from the payment terminal database; the 
second communication section may send an instruction 
requesting a password to the payment terminal and may receive 
from the payment terminal a password input at the payment 
terminal; the processing section may compare the password 
received from the payment terminal with the information 
relating to the password extracted from the payment terminal 
database; and the first communication section may 
authenticate the user by sending to the invoicing terminal 
the result of comparison of the password by the processing 
section. 

The processing section may extract authentication 
information registered by the user of the payment terminal 
from the payment terminal database; the second communication 
section may send to the payment terminal an instruction to 
inquire concerning the authentication information and may 
receive from the payment terminal a response input at the 
payment terminal in respect of the instruction; and the 
processing section may authenticate the user by comparing the 
response received from the payment terminal with the 
authentication information extracted from the payment 
terminal database . 



The authentication information registered by the user of 
the payment terminal and extracted from the payment terminal 
database by the processing section may be at least one of a 
password of the user, voice data generated by the user, image 
data of the face of the user, image data of the iris or 
retina of the eye of the user, or image data of the 
fingerprints of the user and the response received from the 
payment terminal for comparison with the authentication 
information by the processing section may be at least one of 
text data, voice data or image data. 

The first communication section may notify the invoicing 
terminal of the result of authentication of the user by 
sending to the invoicing terminal the result of comparison by 
the processing section. 

The payment terminal database may store a plurality of 
items of authentication information registered by the user 
and the processing section may extract randomly at least one 
of the plurality of items of authentication information from 
the payment terminal database. 

The invoicing terminal database may store authentication 
systems requested by the invoicing terminals and the payment 
terminal database may store authentication systems requested 
by the users; and the processing section may extract the 
authentication system requested by the invoicing terminal 
from the invoicing terminal database and may extract the 
authentication system requested by the user from the payment 
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terminal database and may authenticate the user by 
determining an authentication system that can be agreed in 
accordance with the authentication system requested by the 
invoicing terminal and the authentication system requested by 
the user. 

If the authentication accuracy of the authentication 
system requested by the invoicing terminal and the 
authentication accuracy of the authentication system 
requested by the user are different, the authentication 
system of higher authentication accuracy may be designated as 
the authentication system that can be agreed. 

If the authentication system requested by the invoicing 
terminal and the authentication system requested by the user 
are not compatible, the processing section may refuse 
authentication of the user and the second communication 
section may send to the payment terminal information 
indicating that authentication has been denied. 

The authentication system that is requested by the 
invoicing terminal and the user may comprise particulars 
specifying at least one of visual authentication using data 
of a photograph of the user's face, password authentication 
using authentication information registered by the user as a 
password, or voice authentication using voice data registered 
by the user. 

If the authentication system requested by the user 
comprises particulars specifying refusal of visual 



authentication and the authentication system requested by the 
invoicing terminal comprises particulars to the effect that 
visual authentication is not necessary, the processing 
section may be arranged not to include visual authentication 
in the authentication system that can be agreed. 

If the authentication system requested by the user 
comprises particulars specifying refusal of visual 
authentication and the authentication system requested by the 
invoicing terminal comprises particulars specifying that 
visual authentication is necessary, the processing section 
may refuse authentication of the user and the second 
communication section may send to the payment terminal 
information indicating that authentication has been refused 
since agreement regarding the authentication system cannot be 
obtained. 

If the authentication system requested by the user 
comprises particulars specifying addition of password 
authentication, the processing section may arrive at the 



authentication system that can be agreed by combining 
password authentication with the authentication system 
requested by the invoicing terminal. 

According to a third aspect of the present invention, an 
invoicing terminal that performs invoicing in a transaction 
in respect of a payment terminal that performs payment in the 
transaction by communicating with a settlement device that 
performs settlement of the transaction is characterized in 
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that it comprises: a communication section that connects with 
the settlement device through a communication network and a 
processing section that performs invoicing processing in the 
transaction; and in that the communication section sends to 
the settlement device an identification number identifying 
the invoicing terminal in question and receives from the 
settlement device a synchronization confirmation signal 
indicating that synchronization has been established with the 
payment terminal. 

The communication section may connect with the settlement 
device by using one or other of a telephone circuit, a leased 
circuit or wireless telephone communication. 

There may be further provided a display section that 
displays the processing state of the processing section and 
the communication section may receive from the settlement 
device a transaction identification number that identifies 
the transaction and the display section may display the 
transaction identification number, thereby notifying the 
payment terminal or the user of the payment terminal of the 
transaction identification number and furthermore, if the 
communication section receives from the settlement device a 
synchronization confirmation signal to the effect that 
synchronization with the payment terminal has been 
established, the display section may display the fact that a 
synchronization confirmation signal has been received. 
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There may be further provided a short-range communication 
section that communicates with the payment terminal by 
optical communication or wireless communication and the 
short-range communication section may send the transaction 
identification number to the payment terminal. 

The communication section may send to the settlement 
device the purchase amount in the transaction and may receive 
from the settlement device settlement completion notification 
giving notice of completion of settlement. 

The communication section may receive from the settlement 
device authentication information of the user of the payment 
terminal and the processing section may authenticate the user 
using the authentication information received from the 
settlement device. 

The authentication information of the user may be a 
photograph of the face of the user. 

If the processing section has not been able to 
authenticate the user by the photograph of the user, the 
communication section may send to the settlement device a 
signal seeking authentication of the user by means of a 
password and may receive from the settlement device the 
result of authentication using the password. 

There may be further provided a product selection section 
whereby a product that is desired to be purchased by the user 
of the payment terminal can be selected and 
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a. product discharge section that discharges the product that 
has been purchased and if the communication section has 
received from the settlement device a synchronization 
confirmation signal indicating that synchronization with the 
payment terminal has been established, the product selection 
section may select a product for the user and the 
communication section may send to the settlement device as 
the purchase amount of the transaction the value of the 
product selected by the user and, if the settlement 
completion notification is received from the settlement 
device, the product discharging section may discharge the 
product selected by the user in accordance with the 
settlement completion notification . 

The communication section may send to the settlement 
device product ordering information for prompting the user of 
the payment terminal to input a product order and on 
receiving from the settlement device the particulars of the 
order input by the user of the payment terminal in response 
to the ordering information the processing section may use 
the order particulars to calculate the purchase amount and 
furthermore the communication section may send the purchase 
amount calculated by the processing section to the settlement 
device and may receive from the settlement device settlement 
completion notification giving notice of completion of 
settlement processing . 
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According to a fourth aspect of the present invention an 
invoicing terminal that performs invoicing in a transaction 
in respect of a payment terminal that performs payment in the 
transaction by communicating with a settlement device that 
performs settlement of the transaction and that provides 
information in respect of the transaction by communicating 
with a computer terminal that displays the state of the 
transaction is characterized in that it comprises: a first 
communication section that connects with the settlement 
device through a communication network, a second 
communication section that connects with the computer 
terminal through a communication network and a processing 
section that performs invoicing processing in the 
transaction; and in that the first communication section 
sends to the settlement device an identification number 
identifying the invoicing terminal in question and receives 
from the settlement device a transaction identification 
number that identifies the transaction; the second 
communication section sends to the computer terminal the 
transaction identification number for giving notification of 
the transaction identification number to the user of the 
payment terminal and furthermore the first communication 
section receives from the settlement device a synchronization 
confirmation signal indicating that synchronization has been 
established with the payment terminal. 
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The second- communication section receives the purchase 
amount in the transaction from the computer terminal and the 
first communication section sends the communication section 
purchase amount to the settlement device and may receive 
settlement completion notification, giving notification of 
completion of the settlement, from the settlement device. 

The second communication section may send to the computer 
terminal at least one of the synchronization confirmation 
signal and the settlement completion notification received 
from the settlement device by the first communication section, 
in order for the computer terminal to display the state of 
the transaction. 

According to a fifth aspect of the present invention, an 
authentication device that, by communicating with a first 
terminal and a second terminal that requests authentication 
of the user of the first terminal, performs the 
authentication requested by the second terminal is 
characterized in that it comprises: a user database that 
stores authentication information registered by the user of 
the first terminal; a first communication section connected 
with the first terminal through a first communication 
network; a second communication section connected with the 
second terminal through a second communication network; and a 
processing section that performs the authentication; in which 
the processing section sets an identification number that 
identifies the authentication requested by the second 
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terminal and, if the first terminal sends to this 
authentication device the same authentication number as the 
authentication number, synchronizes communication with the 
first terminal and communication with the second terminal; 
the second communication section receives from the second 
terminal an authentication request for authenticating the 
user of the first terminal; the processing section extracts 
from the user database authentication information for 
authenticating the user of the first terminal; the first 
communication section sends to the first terminal an 
instruction for making inquiry concerning the authentication 
information and receives from the first terminal a response 
input in respect of the instruction by the first terminal; 
the processing section authenticates the user of the first 
terminal by comparing the response received from the first 
terminal with the authentication information extracted from 
the database and the second communication section 
authenticates the user of the first terminal by sending to 
the second terminal the result of authentication by the 
processing section. 

The authentication information registered by the user of 
the first terminal and extracted from the database by the 
processing section may be at least one of a password of the 
user, voice data generated by the user, image data of the 
face of the user, image data of the iris or retina of the eye 
of the user, or image data of the fingerprints of the user 
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and said response received from the first terminal for 
comparison with the authentication information by the 
processing section may be at least one of text data, voice 
data or image data. 

According to a sixth aspect of the present invention a 
recording medium on which is stored a program for a computer 
that performs settlement of a transaction by communicating 
with an invoicing terminal that performs invoicing in a 
transaction and a payment terminal that performs payment in 
the transaction is characterized in that the program 
comprises: a first communication module for acting on the 
computer to effect communication with the invoicing terminal 
through a telephone circuit or leased circuit and a second 
communication module for acting on the computer to effect 
communication with the payment terminal through wireless 
telephone communication and a processing module for effecting 
settlement processing of the transaction and in that the 
processing module sets a transaction identification number 
that identifies the transaction and, if the payment terminal 
sends to this settlement device a transaction identification 
number that is the same as the transaction identification 
number, synchronizes communication with the invoicing 
terminal and communication with the payment terminal. 

According to a seventh aspect of the present invention a 
business method whereby settlement is performed of a 
transaction between an invoicing party that effects invoicing 
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in the transaction, a paying party that effects payment in 
the transaction and a settlement party that performs 
settlement in the transaction is characterized in that it 
comprises: a step wherein a transaction identification number 
of the transaction for identifying the transaction is set by 
the settling party; a step whereby the transaction 
identification number is communicated to the invoicing party 
by the settling party; a step whereby the transaction 
identification number is communicated to the paying party by 
the invoicing party; and a step whereby, if a transaction 
identification number that is the same as the transaction 
identification number is communicated to the settling party 
by the paying party, settlement processing of the transaction 
is performed by the settling party between the invoicing 
party and the paying party associated by the transaction 
identification number. 

According to an eighth aspect of the present invention a 
settlement method in a settlement device that performs 
settlement of a transaction by communicating with an 
invoicing terminal that performs invoicing in the transaction 
and a payment terminal that performs payment in the 
transaction is characterized in that it comprises: a step of 
setting a transaction identification number that identifies 
the transaction; a step of sending the transaction 
identification number to the invoicing terminal; a step 
wherein the invoicing terminal notifies the payment terminal 
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or the user of the payment terminal of the transaction 
identification number and if the payment terminal has sent to 
the settlement device a transaction identification number 
that is the same as the transaction identification number, 
synchronizing communication with the invoicing terminal and 
communication with the payment terminal; a step of sending to 
the invoicing terminal a synchronization confirmation signal 
indicating that synchronization has been established; and a 
step of performing settlement processing of the transaction 
between the invoicing terminal and the payment terminal 
synchronized by the transaction identification number. 

According to a ninth aspect of the present invention a 
settlement device that performs settlement of a transaction 
by communicating with an invoicing terminal that performs 
invoicing in the transaction and a payment terminal that 
performs payment in the transaction is characterized in that 
it comprises: a first communication section connected with 
the invoicing terminal through a first communication network; 
a second communication section connected with the payment 
terminal through a second communication network; and a 
processing section that performs settlement processing of the 
transaction and in that the processing section sets a 
transaction identification number that identifies the 
transaction performed by the payment terminal and, if the 
invoicing terminal sends to this settlement device a 
transaction identification number that is the same as the 
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transaction identification number, synchronizes communication 
with the invoicing terminal and communication with the 
payment terminal. 

The first communication section may send to the payment 
terminal the transaction identification number that 
identifies the transaction and the payment terminal may 
transmit the transaction identification number to the 
invoicing terminal and, if the invoicing terminal sends to 
this settlement device a transaction identification number 
that is the same as the transaction identification number, 
the processing section may synchronize communication with the 
invoicing terminal and communication with the payment 
terminal and the first communication section may send to the 
invoicing terminal a synchronization confirmation signal 
indicating that synchronization has been established. 

The processing section may perform settlement processing 
of the transaction between the invoicing terminal and the 
payment terminal that have been synchronized by the 
transaction identification number. 

According to a tenth aspect of the present invention an 
invoicing terminal that performs invoicing in a transaction 
in respect of a payment terminal that performs payment in the 
transaction by communicating with a settlement device that 
performs settlement of the transaction is characterized in 
that it comprises: a communication section connected with the 
settlement device through a communication network and a 
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processing section that performs invoicing processing in the 
transaction in which the communication section sends to the 
settlement device a transaction identification number that 
identifies the transaction and that has been transmitted from 
the payment terminal and receives from the settlement device 
a synchronization confirmation signal that indicates that 
synchronization has been established with the payment 
terminal that performs the transaction identified by the 
transaction identification number. 

There may be further provided a pattern code reading 
section that acquires the transaction identification number 
by reading a pattern code such as a barcode or cyber code 
that is displayed by the payment terminal and obtained by 
converting the transaction identification number into pattern 
form and the communication section may send to the settlement 
device the transaction identification number acquired by the 
pattern code reading section and receive from the settlement 
device a synchronization confirmation signal indicating that 
synchronization has been established with the payment ■ 
terminal that performs the transaction identified by the 
transaction identification number. 

There may be further provided a short range communication 
section that communicates with the payment terminal by 
optical communication or wireless communication and that 
receives the transaction identification number from the 
payment terminal and the communication section may send to 
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the settlement device the transaction identification number 
and receive from the settlement device a synchronization 
confirmation signal indicating that synchronization has been 
established with the payment terminal that performs the 
transaction identified by the transaction identification 
number. 

If the communication section has received from the 
settlement device the synchronization confirmation signal 
indicating that synchronization with the payment terminal has 
been established, the processing section may perform 
invoicing processing of the transaction in respect of the 
payment terminal with which synchronization has been obtained 

According to an eleventh aspect of the present invention 
a recording medium on which is stored a program for a 
computer that performs settlement of a transaction by 
communicating with an invoicing terminal that performs 
invoicing in a transaction and a payment terminal that 
performs payment in the transaction is characterized in that 
the program comprises: a first communication module to effect 
communication with the invoicing terminal through a telephone 
circuit or leased circuit and a second communication module 
to effect communication with the payment terminal through 
wireless telephone communication and a processing module for 
effecting settlement processing of the transaction and in 
that the processing module sets a transaction identification 
number that identifies the transaction performed by the 
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payment terminal and, if the invoicing terminal sends to this 
computer a transaction identification number that is the same 
as the transaction identification number, synchronizes 
communication with the invoicing terminal and communication 
with the payment terminal. 

According to a twelfth aspect of the present invention a 
transaction settlement method in a settlement device that 
communicates with an invoicing terminal that performs 
invoicing in the transaction and a payment terminal that 
performs payment in the transaction is characterized in that 
it comprises: a step of setting a transaction identification 
number that identifies the transaction; a step of sending the 
transaction identification number to the payment terminal; 
and a step in which the payment terminal transmits the 
transaction identification number to the invoicing terminal 
and if the invoicing terminal has sent to the settlement 
device a transaction identification number that is the same 
as the transaction identification number, performing 
settlement processing of the transaction between the 
invoicing terminal and the payment terminal associated by the 
transaction identification number. 

According to a thirteenth aspect of the present invention 
a settlement method in a settlement device that performs 
transaction settlement by communicating with an invoicing 
terminal that performs invoicing in the transaction and a 
payment terminal that performs payment in the transaction is 
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characterized in that it comprises: a step of setting a 
transaction identification number that identifies the 
transaction; a step of sending the transaction identification 
number to the payment terminal; and a step in which the 
payment terminal displays a pattern code such as a barcode or 
a cyber code obtained by converting the transaction 
identification number into pattern form, the invoicing 
terminal reads the pattern code to acquire the transaction 
identification number and if the invoicing terminal has sent 
to the settlement device a transaction identification number 
that is the same as the transaction identification number, 
performing settlement processing of the transaction between 
the invoicing terminal and the payment terminal associated by 
the transaction identification number. 

According to a fourteenth aspect of the present invention 
a settlement method in a settlement device that performs 
settlement of a transaction by communicating with an 
invoicing terminal that performs invoicing in the transaction 
and a payment terminal that performs payment in the 
transaction is characterized in that it comprises: a step of 
setting a transaction identification number that identifies 
the transaction; a step of sending the transaction 
identification number to the payment terminal; and a step 
wherein the payment terminal sends the transaction 
identification number to the invoicing terminal by optical 
communication or wireless communication and if the invoicing 
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terminal has transmitted to the settlement device a 
transaction identification number that is the same as the 
transaction identification number, performing settlement- 
processing of the transaction between the invoicing terminal 
and the payment terminal associated by the transaction number. 
BRIEF DESCRIPTION OF THE DRAWINGS 
Figure 1 is a layout diagram of an electronic settlement 
system according to a first embodiment of the present 
invention; 

Figure 2 is a diagram of a register terminal 10; 
Figure 3 is a diagram of a mobile telephone constituting 
an example of a user terminal 20; 

Figure 4 is a layout diagram of a synchronization server 

30; 

Figure 5 is a flow chart of settlement processing of an 

electronic settlement system according to a first embodiments- 
Figure 6 is a flow chart of the processing of register 

terminal information enquiry 104; 

Figure 7 is a flow chart of the processing of register 

number check 116; 

Figure 8 is a flow chart of the processing of user 

information check 128; 

Figure 9 is a flow chart of the processing of visual 

authentication 132; 

Figure 10 is a flow chart of the processing of check 136 

of the purchase amount and amount of disposable funds; 
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Figure 11 is a flow chart of the processing of 
purchasing final confirmation 140; 

Figure 12 is an example screen of register-side display 
section 702 of register terminal 10; 

Figure 13 is an example screen of display section 802 of 
user terminal 20; 

Figure 14 is a view illustrating an example of register 
terminal information 6000 stored in register database 50; 

Figure 15 is a view illustrating an example of user 
information 6010 stored in user database 60; 

Figure 16 is a view illustrating an example of an 
attribute information file 6020; 

Figure 17 is a view illustrating an example of a usage 
file 6030; 

Figure 18 is a view illustrating an example of an 
authentication data file 6040; 

Figure 19 is a view given in explanation of an example 
of the authentication system stored in a field of the 
authentication system of register terminal information 6000; 

Figure 20 is a view given in explanation of an example 
of the authentication system stored in a field of the 
authentication system of user information 6010; 

Figure 21 is a view given in explanation of an 
authentication system in which agreement is reached between 
register terminal 10 and user terminal 20 using the 
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authentication system designated by register terminal 10 and 
the authentication system designated by user terminal 20; 

Figure 22 is a flow chart of settlement processing of an 
electronic settlement system according to a second 
embodiment; 

Figure 23 is a flow chart of processing of register 
terminal check 104; 

Figure 24 is a flow chart of processing of user 
information check 128; 

Figure 25 is a flow chart of processing of user 
authentication 135; 

Figure 26 is a flow chart of user authentication 
processing 7006 performed with the addition of password 
authentication after performing visual authentication; 

Figure 27 is a flow chart of processing of password 
authentication 7014; 

Figure 28 is a diagram of a register terminal 10 
according to a third embodiment; 

Figure 2 9 is a view given in explanation of an example 
in which a barcode is displayed on display section 802 of 
user terminal 20; 

Figure 30 is a view given in explanation of an example 
in which a cyber code is displayed on the display section 802 
of user terminal 20; 

Figure 31 is a flow chart of settlement processing of an 
electronic settlement system according to a third embodiment; 
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Figure. 32 is a flow chart of processing of register 
number check 116; 

Figure 33 is a layout diagram of an electronic 
settlement system according to a fourth embodiment of the 
present inventions- 
Figure 34 is a diagram of an automatic vending machine 

16; 

Figure 35 is a flow chart of settlement processing of an 
electronic settlement system according to a fourth 
embodiment; 

Figure 36 is an example screen of display section 802 of 
user terminal 20; 

Figure 37 is a layout diagram of an electronic 
settlement system according to a fifth embodiment of the 
present invention; 

Figure 38 is a flow chart of settlement processing of an 
electronic settlement system according to a fifth embodiment; 

Figure 39 is a flow chart of processing of register 
information check 508; 

Figure 40 is a flow chart of processing of register 
number check 528; 

Figure 41 is a flow chart of processing of user 
information check 536; 

Figure 42 is a flow chart of processing of password 
authentication 538; 
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Figure 43 is an example display screen of user computer 

22; 

Figure 44 is a block diagram illustrating the hardware 
layout of a general-purpose computer 600; and 

Figure 45 is a block diagram illustrating the functional 
layout of software executed by CPU 602. 

Examples of the chief symbols used in the drawings are 
indicated below. 

10 register terminal 

12 virtual register terminal 

14 register server 

16 automatic vending machine 

18 communication circuit 

20 user terminal 

22 user computer 

24 shopping server 

26 Internet 

28 wireless communication transmission path 

30 synchronization server 

38 communication circuit 

40 carrier server 

50 register database 

60 user database 

70 user account database 
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BEST MODF, FOR CARRYTNP: O UT THF. TWVRMT TOM 
Embodiments of the present invention are described below 
with reference to the drawings. 
(First embodiment) 

An electronic settlement system according to a first 
embodiment of the present invention is described. In the 
electronic settlement system according to this embodiment, a 
consumer can purchase a product at a retail store and can 
perform settlement electronically through a communication 
network when paying the charge for the product. Hereinbelow, 
the consumer will be called a "user". 

Figure 1 is a layout diagram of an electronic settlement 
system according to this embodiment. The electronic 
settlement system of this embodiment comprises a register 
terminal 10 constituting an example of an invoicing terminal, 
a user terminal 20 constituting an example of a payment 
terminal, a synchronization server 30 constituting an example 
of a settlement device, a carrier server 40, a register 
database 50 constituting an example of an invoicing terminal 
database, a user database 60 constituting an example of a 
payment terminal database and a user account database 70. 
Communication circuit 18 is a communication circuit 
connecting register terminal 10 and synchronization server 30 
and can be a telephone circuit or a leased circuit. Wireless 
communication transmission path 28 is a transmission path for 
wireless telephone signals linking user terminal 20 and 
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carrier server 40. Communication circuit 38 is a 
communication circuit linking carrier server 40 and 
synchronization server 30 and may be either a telephone 
circuit or a leased circuit. 

Register terminal 10 calculates the charge for the 
products purchased by the user in the retail store and 
requests payment of the charge by the user. Figure 2 is a 
diagram of register terminal 10. Register terminal 10 
comprises a client-side display section 700, a register-side 
display section 702, register main section 704, 
synchronization lamp 706 and infra-red communication section 
708 constituting an example of a short-range communication 
section. Also, although not shown, register terminal 10 has a 
communication function of connecting to synchronization 
server 30 by means of a telephone circuit or leased circuit. 

Client-side display section 700 comprises a display 
screen such as a liquid crystal or LCD screen that displays 
text information on the rear face of register terminal 10; it 
displays the total charge for the products and/or the 
"register number", to be described and communicates these to 
the user. Register-side display section 702 displays the 
steps of calculation of the charge for the product and/or the 
processing steps of electronic settlement. Synchronization 
lamp 706 is a lamp that is lit to give notification of the 
synchronization condition, when a "synchronization" condition, 
to be described, is established. Infra-red communication 
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section 708 performs data communication with infra-red 
communication section 808 of the user's user terminal 20 by 
infra-red communication. 

User terminal 20 designates performance of payment of 
the charge for the products purchased by the user by credit 
means such as a credit card or bank card. An example of a 
user terminal 20 is wireless telephone communication means 
such as a mobile telephone. Another example of a user 
terminal 20 is a mobile terminal such as a PDA or notebook- 
type personal computer capable of performing communication by 
connecting to wireless communication means such as a mobile 
telephone . 

Figure 3 is a diagram of a mobile telephone constituting 
an example of user terminal 20. User terminal 20 comprises an 
antenna 800, display section 802, control keys 804, dialing 
keys 806 and infra-red communication section 808. User 
terminal 20 communicates with carrier server 40 through 
wireless communication transmission path 28 by means of 
antenna 800. User terminal 20 has a data packet communication 
function and can transmit and receive digital data. Display 
section 802 displays text information/image information 
transmitted and received by the data packet communication 
function. Menu items or keys displayed on display section 802 
are selected by control section 804. Dialing keys 806 are 
keys for inputting telephone numbers or passwords etc. Infra- 
red communication section 808 performs data communication 
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with infra-red communication section 708 of register terminal 
10. 

User terminal 20 is connected with carrier server 40 by 
means of wireless communication transmission path 28. Carrier 
server 40 is connected with synchronization server 30 by 
means of communication circuit 38. User terminal 20 can 
therefore perform data communication with synchronization 
server 30. 

Synchronization server 30 performs settlement processing 
of product transactions between the retail store and the user. 
Synchronization server 30 is capable of connecting with 
register database 50 that accumulates the information of 
register terminal 10, user database 60 that accumulates the 
information of user terminal 20 and user account database 70 
that accumulates the information of the user's credit account 
or bank account and of looking up and acquiring information 
from these respective databases. Synchronization server 30, 
register database 50, user database 60 and user account 
database 70 are provided in the credit company or bank 
network. It would also be possible for only user account 
database 70 to be provided on the credit card company's or 
bank's network, synchronization server 30 being connected 
with user account database 70 through a leased circuit. 

Synchronization server 30 performs data communication by 
being connected with register terminal 10 and user terminal 
20 through the communication network. No direct communication 
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means are provided between register terminal 10 and user 
terminal 20. Synchronization server 30 acquires information 
relating to the invoicing of the product transaction by 
communication with register terminal 10 and acquires 
information relating to the payment for the product 
transaction by communication with user terminal 20. 
Synchronization server 30 performs settlement processing of 
transactions between register terminal 10 and user terminal 
20 by synchronizing communication with register terminal 10 
and communication with user terminal 20. 

Figure 4 is a layout diagram of synchronization server 
30. Synchronization server 30 comprises a processing section 
80 that processes settlement, a first communication section 
82 that processes data communication through communication 
circuit 18, a second communication section 84 that processes 
data communication through communication circuit 38 and 
wireless communication transmission path 28 and a database 
look-up section 8 6 that looks up database information by 
accessing register database 50, user database 60 and user 
account database 70. 

An outline of "synchronous settlement" and "synchronous 
authentication" by the electronic settlement system according 
to the present invention will now be described. 

"Synchronous settlement" consists in a method of 
performing settlement processing of transactions between 
register terminal 10 and user terminal 20 by obtaining 
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synchronization of communication in real time between 
register terminal 10 and user terminal 20 through 
synchronization server 30 that communicates with both 
register terminal 10 and user terminal 20, without performing 
communication between register terminal 10 and user terminal 
20. 

In the electronic settlement system, in order for 
settlement of transactions to be performed between a 
plurality of register terminals 10 and a plurality of user 
terminals 20, in respect of a specific transaction, it is 
necessary for synchronization server 30 to specify the 
register terminal 10 that invoices the transaction in 
question and the user terminal 20 at which this transaction 
is paid and to synchronize communication of register terminal 
10 and user terminal 20 to perform settlement processing in 
respect of transactions between these two. 

In order to synchronize communication of register 
terminal 10 and user terminal 20, as an example of a 
transaction identification number that identifies a specified 
transaction, a "register number" is employed. Register 
terminal 10 connects to synchronization server 30 and when 
communication is effected, synchronization server 30 
determines a register number and transmits this to register 
terminal 10. Register terminal 10 informs the user of the 
register number by displaying the register number received 
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from synchronization server 30 on client-side display section 
700. 

Using user terminal 20, the user inputs the register 
number of which the user has been notified and, on connecting 
to synchronization server 30, transmits this register number. 
If, of the plurality of register terminals 10 in respect of 
which register numbers have been issued, there is a register 
terminal 10 that matches the register number received from 
user terminal 20, synchronization server 30 effects 
synchronization of communication of this register terminal 10 
with the user terminal 20. If there is no matching register 
number, user terminal 20 is not synchronized with any 
register terminal 10. In this way, settlement processing in 
respect of a specific transaction identified by a register 
number is performed by synchronization server 30 
synchronizing communication of register terminal 10 and user 
terminal 20 by using the register number to specify the 
register terminal 10 that invoices the transaction in 
guestion and the user terminal 20 that is used to effect 
payment of this transaction. Settlement of the transaction 
between register terminal 10 and user terminal 20 can 
therefore be performed without performing direct 
communication between register terminal 10 and user terminal 
20. 

Next, an outline of "synchronous authentication" will be 
given. Let us assume that the cashier using register terminal 
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10 wishes to confirm that the user of user terminal 20 is 
really the keeper of user terminal 20. "Synchronous 
authentication" is a system whereby register terminal 10 
authenticates the user of user terminal 20 by obtaining 
synchronization of communication between register terminal 10 
and user terminal 20 through synchronization server 30, which 
communicates with both of register terminal 10 and user 
terminal 20, without performing communication between 
register terminal 10 and user terminal 20. No information 
relating to authentication is directly transmitted or 
received between register terminal 10 and user terminal 20. 

The mobile telephone constituting an example of user 
terminal 20 has a call origination telephone number that is 
exclusive to that mobile telephone and when a telephone call 
is made this exclusive call originating telephone number is 
inevitably employed. The caller originating telephone number 
is exclusive to the mobile telephone and calls cannot be made 
using the same call originator telephone number except from 
this mobile telephone. Consequently, so long as the mobile 
telephone is employed by the keeper of the mobile telephone, 
the call origination telephone number of the mobile telephone 
can be used as a user identification ID. That is, the mobile 
telephone performs the role of an ID card such as a driving 
license etc. 

However, if the keeper of the mobile telephone loses the 
mobile telephone and this mobile telephone is used by another 
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person, even though the mobile telephone can be uniquely 
specified by the call originating telephone number, it is not 
clear whether or not the user of the mobile telephone is 
really the keeper of the mobile telephone. Accordingly, in 
the electronic settlement system, data associating the call 
origination telephone number of the mobile telephone and the 
information of the user of the mobile telephone are stored in 
user database 60 in order to verify whether or not the user 
of the mobile telephone is indeed the keeper thereof. 

Synchronization server 30, on connecting with user 
terminal 20, authenticates the user by detecting the call 
origination telephone number of user terminal 20 and using 
this call origination telephone number to look up database 60 
to extract information relating to the user. Authentication 
systems include visual authentication and/or password 
authentication or voice authentication etc; these 
authentication systems may be used in combination. 

In the case of visual authentication, synchronization 
server 30 extracts data of a photograph of the face of the 
user from user database 60 and sends this to register 
terminal 10, where the cashier can verify whether the user is 
genuine or not. In the case of password authentication, 
synchronization server 30 extracts password information from 
user database 60 and sends a password request instruction to 
user terminal 20, in response to which the user inputs the 
password from user terminal 20 and sends it to 
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synchronization server 30. Synchronization server 30 compares 
the password that is transmitted thereto with the password 
registered in user database 60 and transmits to register 
terminal 10 the result of the verification. In the case of 
voice authentication, instead of a password, voice data of 
the user pronouncing a registered word is recorded in the 
database and the user is prompted to input the pronunciation 
data of the registered word from user terminal 20 and send 
this to synchronization server 30. 

Also, if for example visual authentication is 
insufficient, it would be possible to improve the accuracy of 
authentication by performing combined authentication 
consisting for example of a combination with other 
authentication systems such as password authentication. 

In the case of "synchronous authentication", secret 
information such as passwords is not exchanged between the 
register terminal 10 and user terminal 20 as register 
terminal 10 and user terminal 20 do not communicate directly. 
Since the authentication processing is mediated by 
synchronization server 30 that communicates with both 
register terminal 10 and user terminal 20, the cashier using 
register terminal 10 can indirectly authenticate the user 
using user terminal 20. Consequently, user authentication is 
performed without letting the cashier know the secret 
information such as the user's password and without sending 
data such as the password from the user terminal 20 to 
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register terminal 10; thus there is no risk of leakage of the 
user's personal information. Even if the data exchanged 
between the user terminal 20 and synchronization server 30 is 
stolen by eavesdropping etc, since no personal information at 
all is exchanged, safety is ensured. 

By combining "synchronous settlement" and "synchronous 
authentication", electronic settlement processing can be 
implemented whereby security is guaranteed, privacy 
safeguarded and which is of high reliability. In addition, a 
mobile telephone or mobile terminal capable of communication 
by connection with a mobile telephone etc has the convenience 
of portability in that the user can carry it anywhere and in 
that it can perform communication anywhere using wireless 
telephone communication. The electronic settlement system 
according to this embodiment therefore makes it possible to 
achieve convenient electronic settlement with safety and high 
reliability. 

Settlement processing with an electronic settlement 
system according to this embodiment is described below with 
reference to Figure 5 to Figure 13. Figure 5 is a flow chart 
of settlement processing of an electronic settlement system 
according to this embodiment. The settlement processing with 
the passage of time of register terminal 10, user terminal 20 
and synchronization server 30 is shown by a flow chart; 
mutual exchange of information between register terminal 10, 
user terminal 20 and synchronization server 30 is indicated 
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by arrows in the lateral direction. Figure 6 to Figure 11 are 
flow charts showing details of the processing in Figure 5. 
Figure 12 is an example screen of register-side display 
section 702 of register terminal 10 and Figure 13 is an 
example screen of display section 802 of user terminal 20. 

Hereinbelow, although there is no particular restriction 
to this, exchange of information between register terminal 10 
and synchronization server 30 is performed through 
communication circuit 18 and exchange of information between 
user terminal 20 and synchronization server 30 is performed 
through wireless communication transmission path 28 and 
communication circuit 38. The method of accessing a 
synchronization server 30 from register terminal 10 may be 
either a method of accessing by dialing up from a telephone 
circuit or a method of accessing the server gateway through a 
leased circuit. The method of accessing synchronization 
server 30 from user terminal 20 may be by means of wireless 
telephone communication, if user terminal 20 is a mobile 
telephone. 

Settlement processing will now be described with 
reference to Figure 5. A user shops for commercial products 
in a retail store and pays the charge for the products at the 
counter register. The cashier receives a request for 
settlement by electronic settlement from the user, selects 
the electronic settlement menu item from register terminal 10 
and commences synchronous settlement (100) . Register terminal 
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10 then accesses the synchronization server 30 (102). When 
register terminal 10 accesses synchronization server 30, it 
transmits a register registration number that is unique to 
this register terminal. 

Synchronization server 30 commences connection with 
register terminal 10 in response to the access from register 
terminal 10 and initiates a check for the register terminal 
information (104) under the register registration number that 
has been transmitted thereto from register terminal 10. 

The processing of register terminal information check 
104 will now be described with reference to Figure 6. 
Synchronization server 30 accesses register database 50 
(1042) and extracts register terminal information of the 
register terminal matching the register registration number 
(1044). In the register terminal information, there are 
registered the retail store name, shop name and 
authentication system etc. The authentication system may be a 
visual authentication system or password authentication 
system etc.; which authentication system is used is set in 
the register terminal information. Synchronization server 30 
determines (1046) the selection of the authentication system 
that has been set in the register terminal information. 
Hereinbelow, the description will be given assuming that 
selection of a visual authentication system has been 
determined on as the authentication system. In addition, 
synchronization server 30 allocates a register number to the 
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register terminal 10 in question (1048). The register number 
is the number that is used by this register terminal 10 to 
identify the subsequent settlement. 

The register number is a series of numbers generated by 
for example a random number and, in order to facilitate input 
thereof from the user terminal 20, should have as few digits 
as possible. However, if a plurality of register terminals 10 
or a plurality of user terminals 20 were to access 
synchronization server 30 using the same register number at 
the same time, it would become impossible for synchronization 
server 30 to associate the register terminal 10 and user 
terminal 20. Consequently, the register numbers are allocated 
in such a way that there is no possibility of the same 
register number being used two or more times within a given 
fixed time. However, once the given fixed time has passed, 
the same register number may be used again as a register 
number. In this way, uniqueness of the register number can be 
maintained even without increasing the number of digits of 
the register number. 

In addition, collision of register numbers can be even 
more reliably prevented by providing a function whereby 
synchronization server 30 restricts the allocation of 
register numbers such that the same register number as a 
register number which is in the condition "awaiting access", 
to be described, is not issued. 
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When there are a large number of retail store branches, 
collision of register numbers generated by a random number 
may occur if the number of digits of the register number is 
small. In such cases, collision of register numbers can be 
avoided by an expedient such as restricting the range of 
random numbers such that register numbers of respective 
branches are numbers that do not collide with each other. 

Thus the register number is a number that identifies a 
transaction but is not a number with a large number of digits 
such as a transaction ID that is uniquely determined for all 
transactions i.e. it is a number with a small number of 
digits that is capable of temporarily identifying a 
transaction . 

Returning to Figure 5, the action after processing of 
the register terminal information check 104 will be described. 
Synchronization server 30 transmits (106) a register number 
to the register terminal 10 in question. Synchronization 
server 30 is then in a condition "awaiting access" in which 
it is waiting for incoming access by user terminal 20 using 
this register number. Also, the condition of register 
terminal 10 to which this register number has been 
transmitted is termed the "awaiting synchronization" 
condition. 

Register terminal 10 displays (108) the register number 
that has been sent from synchronization server 30 on client- 
side display section 700. A screen as in Figure 12(a) is 
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displayed on register terminal 10 and the register number is 
displayed; also, the fact that the user terminal is in the 
"awaiting synchronization" condition waiting to access 
synchronization server 30 using this register number is 
displayed. The cashier notifies (110) the user of the 
register number displayed on register terminal 10. The 
cashier may notify the user of the register number orally. Or 
the register number displayed on the client-side display 
section 700 of register terminal 10 may be shown to the user. 

It is possible for the cashier to cancel settlement 
processing by selecting a cancel key on the screen of. Figure 
12(a). This cancellation processing is performed if, for some 
reason such as poor communication, user terminal 20 is unable 
to access synchronization server 30 or if, even though user 
terminal 20 has correctly transmitted the register number, 
synchronization server 30 is unable to establish 
synchronization. 

When the register number input screen is displayed on 
user terminal 20 as shown in Figure 13(a), the user inputs 
the register number communicated to the user by the cashier 
(112). The user then transmits (114) the register number to 
the synchronization server 30 by selecting the transmit key 
of the register number input screen. Or termination may be 
effected by canceling settlement processing by selecting the 
cancel key. Such cancellation processing or may be performed 
for example in cases where settlement processing is not 
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proceeding even though the register number has been correctly 
input, for a reason such as adverse communication conditions. 

On receipt of the register number transmitted from user 
terminal 20, synchronization server 30 checks the register 
number (116) . 

The "synchronization" condition between register 
terminal 10 and user terminal 20 achieved by checking the 
register number will now be described. Synchronization server 
30 accesses user terminal 20 and is in the condition 
"awaiting access" waiting for transmission of the register 
number. In the "awaiting access" condition, if there is a 
user terminal 20 that is performing access using the same 
register number as the register number that has been 
allocated to register terminal 10, synchronization server 30 
realizes synchronization between register terminal 10 and 
user terminal 20 by establishing a one-to-one 

"synchronization" condition between register terminal 10 and 
user terminal 20. It is not possible for access from a 
plurality of user terminals 20 to be associated with a 
register terminal 10 under a single register number. 

A time-out is set in regard to the "awaiting access" 
condition of synchronization server 30, according to which 
"awaiting access" from user terminal 20 is limited to for 
example three minutes. If access from user terminal 20 under 
the register number has not been effected by the expiry of 
the limiting time, synchronization server 30 performs 
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initialization by cutting off connection with register 
terminal 10. This time-out function is set up in order to 
avoid problems being caused if the user inputs the register 
number incorrectly or if exchange of information is not 
performed normally due to adverse communication conditions 
between the user terminal 20 and synchronization server 30 . 

The processing of register number check 116 will now be 
described with reference to Figure 7. In Figure 7, being in 
the "awaiting access" condition, synchronization server 30 
ascertains (1162) whether access is taking place from a user 
terminal and whether or not a register number has been sent 
from the user terminal; if access has not taken place, it 
ascertains whether or not the set time for time-out has 
elapsed (1164); if it has elapsed, the synchronization server 
effects termination by cutting off (1166) connection with 
register terminal 10. If this happens, the screen of Figure 
12 (b) is displayed, indicating that connection with register 
terminal 10 has been forcibly cut off. 

If user terminal 20 has transmitted a register number, 
[the synchronization server 30] ascertains (1168) whether or 
not there is a register terminal 10 in the "awaiting 
synchronization" condition corresponding to this register 
number; if there is not, it transmits (1170) a register 
number check error message to the user terminal 20. User 
terminal 20 displays (1172) the screen of Figure 13(b) 
indicating a register number error. Thereupon, when the user 
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selects the OK key, processing returns to the processing of 
112 and the user terminal 20 again displays the screen of 
Figure 13(a) prompting the user to re-input the register 
number. 

If there is a register terminal 10 in the "awaiting 
synchronization" condition corresponding to the same register 
number as the register number transmitted by the user 
terminal 20, synchronization server 30 synchronizes 
communication with register terminal 10 and communication 
with user terminal 20 (1174) by establishing the 
"synchronization" condition of register terminal 10 and user 
terminal 20. 

The description will be continued returning to Figure 5. 
When the synchronization condition is established, 
synchronization server 30 sends a synchronization signal to 
register terminal 10 (118). When register terminal 10 
receives the synchronization signal from synchronization 
server 30, it turns on the synchronization lamp 706 of 
register terminal 10 (120) . The cashier can thereby be 
advised that a synchronization condition has been achieved. 

Also, on commencing synchronization, synchronization 
server 30 transmits the register terminal information 
obtained from register database 50 in register terminal 
information check 104 to the user terminal 20. User terminal 
20 displays the screen of Figure 13(c), enabling the user to 
ascertain (124) whether the register terminal with which 
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synchronization has been obtained is correct or not. If the 
user presses the cancel key, processing returns to register 
number input 112. This cancellation processing is employed 
for example to cancel further progress of settlement 
processing if synchronization has been obtained with the 
wrong register terminal due to the user inputting the wrong 
register number. 

When the user confirms the register terminal information 
by selecting the OK key of the screen of user terminal 20 
shown in Figure 13(c), user terminal 20 sends (126) a 
register terminal information confirmation signal to 
synchronization server 30. When synchronization server 30 
receives the register terminal information confirmation 
signal transmitted by user terminal 20, it performs the 
processing of user information check 128. 

The processing of user information check 128 will now be 
described with reference to Figure 8. Synchronization server 
30 looks up (1280) the user terminal number of user terminal 
20. If user terminal 20 is a mobile telephone, the user 
terminal number is the call origination telephone number. 
Synchronization server 30 ascertains whether or not user 
terminal 20 is the subject of user registration (1284) by 
accessing (1282) user database 60. If this is not the subject 
of user registration, it transmits (1286) a message "not 
registered" to user terminal 20. The screen of Figure 13(d) 
indicating that the user is not registered is displayed on 
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user terminal 20. Synchronization server 30 then terminates 
by releasing (1290) the synchronization condition of register 
terminal 10 and user terminal 20. 

It can be arranged that, when a user terminal 20 
initially accesses synchronization server 30 by selecting the 
synchronous settlement menu item on user terminal 20, 
synchronous server 30 detects the call origination telephone 
number of user terminal 20. Also, it could be arranged for 
synchronization server 30 to detect the call origination 
telephone number of user terminal 20 when user terminal 20 
sends a register number to synchronization server 30 by the 
user inputting the register number to user terminal 20. 

If user registration is successfully confirmed, the user 
information is extracted (1292) from user database 60. 
Information relating to the user's usage is recorded in the 
user information and this information is used to confirm 
(12 94) whether or not there is any problem in the user's 
usage of the credit card or bank card etc. If there is a 
problem regarding the usage, a message "not available for 
use" is sent (1296) to user terminal 20. The screen of Figure 
13(e) is displayed on user terminal 20, indicating that the 
card is not available for use. Synchronization server 30 then 
terminates by releasing (1298) the synchronization condition 
of register terminal 10 and user terminal 20. 

If there is no problem regarding the user's usage, 
synchronization server 30 advanoes to the next processing. 
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The description is continued, returning to Figure 5, 
Synchronization server 30 performs "synchronous multi- 
authentication" using the authentication system determined by 
register terminal information check 104. Synchronous multi- 
authentication is authentication comprising a plurality of 
authentication stages performed between register terminal 10 
and user terminal 20 after the synchronization server has 
established a synchronization condition between register 
terminal 10 and user terminal 20. Information relating to 
authentication is exchanged only between register terminal 10 
and synchronization server 30 and between user terminal 20 
and synchronization server 30; information relating to 
authentication is not exchanged between register terminal 10 
and user terminal 20. Thanks to the mediation of 
authentication by synchronization server 30, the cashier can 
authenticate the user of user terminal 20 without the user 
exchanging any of the user's individual authentication 
information with the cashier. 

Synchronous multi-authentication processing will now be 
described for the case where adoption of visual 
authentication is determined on as the authentication system 
in the register terminal information check 104. 
Synchronization server 30 acquires an image of a photograph 
of the face of a user from user database 60 in user 
information check 128 and sends (130) this image data of the 
photograph of the face to register terminal 10. Register 
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terminal 10 receives the image data of the photograph of the 
face of the user from synchronization server 30 and performs 
visual authentication (132) . 

The processing of visual authentication 132 will now be 
described with reference to Figure 9. The image of the 
photograph of the face of the user is displayed (1320) by 
register terminal 10. Figure 12 (d) is an example display of 
the screen of register terminal 10. The cashier compares the 
user with the face photograph to confirm whether the user is 
genuine or not (1322). If there is a doubt as to whether the 
user is genuine or not or if a high-value purchase is in 
question, the cashier selects the DOUBT key on the screen of 
Figure 12(d), thereby sending (1324) a DOUBT signal to 
synchronization server 30. In this situation, register 
terminal 10 displays a screen indicating that password 
authentication is in progress, as shown in Figure 12(e). If 
the cashier presses the OK key of Figure 12(d), the 
processing 132 of visual authentication is terminated. 

When synchronization server 30 receives a DOUBT signal 
from register terminal 10, it compiles authentication data 
(1326) by acquiring the data necessary for authentication 
from user database 60 in order to perform password 
authentication. Synchronization server 30 initializes (1328) 
to 0 a variable n that stores the number of password requests. 
Synchronization server 30 then (1330) increments n by 1 and 
sends (1332) a password request message to user terminal 20. 
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The screen shown in Figure 13(f) is displayed on user 
terminal 20 and the user inputs the password (1334) . User 
terminal 20 then sends the password that has been input by 
the user to synchronization server 30 (1336) . When 
synchronization server 30 receives the password that has been 
transmitted from user terminal 20, it checks to ascertain 
whether the password is correct or not (1338) . 

If the password that is transmitted from user terminal 
20 is wrong, the server ascertains (1340) whether or not the 
number of password requests n is more than 2; if it is not, 
processing returns to processing 1330 and the password 
request is repeated. If the number of password requests n is 
greater than 2, a message to the effect that authentication 
failed is sent to user terminal 20 (1344) . User terminal 20 
displays the screen of Figure 13(g) (1346), giving 
notification that the service is not available for use since 
authentication has failed. Also, an "authentication failed" 
message is sent to register terminal 10 (1342) . Register 
terminal 10 displays a screen (1350) indicating that password 
authentication has failed and terminates. After 
synchronization server 30 has sent the "authentication 
failed" message to user terminal 20 and register terminal 10, 
it releases the synchronized condition of register terminal 
10 and user terminal 20 (1348). 

If, in the password checking 1338 in password 
authentication, synchronization server 30 ascertains that the 
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password is correct, it sends a password authentication OK 
signal to register terminal 10 (1348). Register terminal 10 
displays the screen of Figure 12(f) (1350) indicating that 
password authentication has succeeded and terminates the 
processing 132 of visual authentication. 

The description will be continued returning to Figure 5. 
When visual authentication processing 132 is completed, 
register terminal 10 sends (134) to synchronization server 30 
purchase amount information including the total value of the 
purchase amount. When synchronization server 30 receives this 
purchase amount information from register terminal 10, it 
performs processing 136 to compare the purchase amount with 
the amount of disposable funds. 

The processing 136 to compare the purchase amount with 
the amount of disposable funds will now be described with 
reference to Figure 10. Synchronization server 30 compares 
(1362) the amount of disposable funds of for example the 
user's credit card or bank card acquired from user database 
60 in user information check 128 and the purchase amount sent 
by register terminal 10 and if the purchase amount does not 
exceed the amount of disposable funds, terminates the 
comparison. If the purchase amount does exceed the amount of 
disposable funds, a message "exceeds disposable funds" is 
sent to user terminal 20 (1364) and the synchronization 
condition between register terminal 10 and user terminal 20 
is released (1366). The screen of Figure 13(h) giving 
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notification that the amount of disposable funds is exceeded 
is then displayed on user terminal 20. 

Returning to Figure 5, the processing steps after 
processing of comparison 136 of the purchase amount and the 
amount of disposable funds will be described. Synchronization 
server 30 sends (138) total amount information including the 
purchase amount to user terminal 20. When user terminal 20 
receives the total amount information from synchronization 
server 30, purchasing final confirmation processing 140 is 
performed. 

The purchasing final confirmation processing 140 will 
now be described with reference to Figure 11. User terminal 
20 displays the total purchase amount by displaying the 
screen of Figure 13(i) (1402). The user ascertains whether 
the total purchase amount is correct or not (1404) and, if it 
is correct, selects the OK key of the screen, thereby 
terminating purchasing final confirmation processing 140. If 
the total purchase amount is not correct, the user selects 
the cancellation key. If the user selects the cancellation 
key, user terminal 20 displays (1406) the screen of Figure 
13 (j) indicating that settlement has been cancelled and sends 
(1408) a cancellation signal to synchronization server 30. 
When synchronization server 30 receives cancellation signal 
from user terminal 20, it sends (1410) a cancellation signal 
to the register terminal. Register terminal 10 displays 
(1412) a screen as shown in Figure 12(g) displaying a message 
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to the effect that settlement has been cancelled by the user. 
After sending the cancellation signal to register terminal 10, 
synchronization server 30 releases the synchronization of 
register terminal 10 and user terminal 20 (1414). 

The processing steps after processing of purchasing 
final confirmation 140 will now be described, returning to 
Figure 5. User terminal 20 sends (142) a purchasing final 
confirmation signal to synchronization server 30. When 
synchronization server 30 receives the purchasing final 
confirmation signal from user terminal 20, it performs 
settlement processing (144) in which it records the 
purchasing information by accessing user account database 70. 
When settlement is completed, synchronization server 30 sends 
(146) a notification of settlement completion to register 
terminal 10 and sends (150) a receipt to user terminal 20. 
The screen of Figure 12(h) indicating that settlement has 
been completed is displayed (148) on register terminal 10. 
User terminal 20 displays (152) the screen of Figure 13 (k) 
indicating that settlement has been completed. 

In the description of settlement processing given above, 
when synchronization server 30 sends notification of 
settlement completion 146 to register terminal 10 it could be 
arranged for the synchronization server 30 to extract from 
user database 60 some of the attribute information relating 
to the user of user terminal 20 with which the payment for 
the transaction in question has been made and to send this to 
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register terminal 10. The attribute information of the user 
which is sent to register terminal 10 may be for example 
information relating to attributes such as the sex and age of 
the user but preferably does not include personal information 
such as name, address and credit card number. By acquiring 
the information relating to the user who made payment for 
this transaction, register terminal 10 may accumulate as 
purchase history details of the products in respect of which 
a transaction was made and the user information, in the 
database of the retail store. The retail store may therefore 
extract from the purchasing history information accumulated 
in this database user purchasing behavior such as the age 
range of users purchasing specific products and can use this 
in the marketing of products. 

Also, in addition to receiving the total amount of 
product purchases from register terminal 10, synchronization 
server 30 receives detailed information relating to purchased 
products such as the names and prices of the products 
purchased and can record these as the purchasing history of 
the user in user database 60. User terminal 20 can receive 
this purchase history from synchronization server 30 by 
asking for the user purchasing history from synchronization 
server 30. 

The functioning and operation of settlement processing 
of an electronic settlement system according to this 
embodiment is as described above. If, in the course of the 
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exchange of information regarding settlement described above, 
a communication fault such as interruption of communication 
occurs, all of the information and temporary data etc 
relating to the processing are initialized and termination is 
effected. 

Although, in the settlement processing described above, 
the cashier communicates the register number to the user 
orally, or the register number displayed on the client-side 
display section 700 of register terminal 10 is shown to the 
user, the method of transmitting the register number to the 
user or user terminal 20 is not restricted to these. It could 
be arranged for the register number received by the register 
terminal 10 to be sent to an infra-red communication section 
808 of user terminal 20 from an infra-red communication 
section 708 of register terminal 10. In this way, the time 
required for the user to input the register number to user 
terminal 20 is saved and errors in inputting the register 
number are eliminated. Also, as the means for transmitting 
the register number from register terminal 10 to user 
terminal 20, it may be arranged for the register number to be 
transmitted and received using wireless communication for 
mobile equipment such as the Bluetooth system, by providing 
register terminal 10 and user terminal 20 with short-range 
communication sections, of which one example is wireless 
communication sections. 
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In the above settlement processing, processing such as 
register terminal information check 104, register number 
check 116, user information check 128, checking 136 of the 
purchase amount and amount of disposable funds and settlement 
processing 144 performed by synchronization server 30 are 
performed by a settlement processing section 80 and data 
look-up section 86 of synchronization server 30. 

Also, the processing of receipt 102 of accessing from 
register terminal 10, register number transmission 106 to 
register terminal 10, synchronization signal transmission 118 
to register terminal 10, transmission 130 of an image of a 
photograph of the user's face to register terminal 10, 
receipt 134 of purchase amount information from register 
terminal 10 and communication 146 of completion of settlement, 
constituting the data communication performed by 
synchronization server 30 with register terminal 10, are 
performed by a first communication section 82 of 
synchronization server 30. 

Also, the processing of register number reception 114 
from user terminal 20, transmission 122 of register 
information to user terminal 20, reception 126 of the 
register terminal information confirmation signal from user 
terminal 20, sending 138 of total amount information to user 
terminal 20, reception 142 of the purchasing final 
confirmation signal from user terminal 20 and communication 
150 of the receipt to user terminal 20, constituting the data 
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communication performed by synchronization server 30 with the 
user terminal 20, are performed by a second communication 
section 84 of synchronization server 30. 

The description concerning "synchronous multi- 
authentication" used in the electronic settlement system of 
this embodiment will now be supplemented. In this embodiment, 
combined authentication can be performed in which a plurality 
of authentication systems are combined. In the synchronous 
multi-authentication system, the user registers beforehand a 
plurality of passwords in user database 60. Usually, four 
digits are employed as the code number of credit cards or 
cash cards etc but, since users employ simple combinations of 
numeral and/or date of birth, telephone number etc in order 
to make it easy to remember these, these can easily be learnt 
by other people so dishonest use may occur. In the 
"synchronous multi-authentication" system, the user registers 
information known only to the user such as for example the 
user's mother's maiden name, grandfather's or grandmother's 
name and the name of the local district of the user's 
original domicile. Synchronization server 30 randomly selects 
one of these items of registered information and sends a 
question inquiring about this registered information to user 
terminal 20. Failure to reply correctly to the content of the 
randomly posed question can only happen if the user of user 
terminal 20 is not genuine. Thus, if there is doubt in 
authentication using a photograph of the face, accuracy of 
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authentication can be further reliably increased by randomly 
asking for a password. Also there is the advantage that, 
since information known only to the genuine user can be 
employed for the password rather than a password which is 
difficult for the user to remember such as a combination of 
numbers, there is no possibility of this being forgotten or 
mis-remembered. Also, since authentication between the user 
terminal 20 and register terminal 10 is mediated by 
synchronization server 30, there is no possibility of flow of 
password information from user terminal 20 to register 
terminal 10. Consequently, there is no risk at all of the 
cashier learning the user's password so there is the 
advantage that the password can be used with confidence. 

In the electronic settlement system of this embodiment, 
the cashier of the retail store authenticates the user using 
a photograph of the user's face and in doubtful cases or in 
cases where a high-value settlement is involved accuracy of 
authentication can be further raised in accordance with the 
circumstances by requesting input of a password by the user. 
Also the user can perform settlement in a convenient and safe 
manner using portable equipment having a wireless 
communication function such as a mobile telephone or portable 
terminal . 

(Second embodiment) 

A second embodiment of an electronic settlement system 
according to the present invention will now be described. In 
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the first embodiment, synchronization server 30 looked up the 
register terminal information stored in register database 50 
and extracted the authentication system specified by the 
retail store or register terminal 10 and authenticated the 
user by using this extracted authentication system. The 
second embodiment differs from the first embodiment in that 
the user or user terminal 20 can specify the authentication 
system so that the system used to authenticate the user is 
determined in accordance with the user-specified 
authentication system and the register terminal-specified 
authentication system. Description of construction and 
operation which is the same as in the first embodiment is 
omitted. 

Figure 14 is a view showing an example of register 
terminal information 6000 stored in register database 50. In 
register information 6000 there are stored the register 
registration number that identifies register terminal 10, the 
name of the retail store, shop name, register terminal number 
and the authentication system designated by the retail store 
or register terminal 10. As the authentication system for 
example performance of both visual authentication and 
password authentication may be specified. Figure 19 is a view 
given in explanation of an example of an authentication 
system in which the authentication system is stored in a 
field of register terminal information 6000. As the 
authentication system specified by the retail store or 
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register terminal 10, there may be employed the type wherein 
authentication system is specified using at least one of 
visual authentication and password authentication such as: 
"no authentication", visual authentication or password 
authentication, only visual authentication, only password 
authentication or both visual authentication and password 
authentication or the type may be employed in which the 
authentication system is varied in accordance with the amount 
of the purchase, such as, if the amount of the purchase is 
above for example 10,000 Yen, visual authentication and 
password authentication are performed but in other cases 
visual authentication is performed. 

Figure 15 is a view showing an example of user 
information 6010 stored in user database 60. In user 
information 6010 there are stored the user terminal 
identification number of user terminal 20, for example the 
call origination telephone number, user attribute information, 
the user's electronic settlement usage, the credit card or 
bank card number, the amount of disposable funds, the 
authentication system specified by the user or user terminal 
20 and the authentication data registered by the user. The 
user's attribute information is stored in attribute 
information file 6020, the user's usage of electronic 
settlement is stored in usage file 6030 and the 
authentication data registered by the user is stored in 
authentication data file 6040. 
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Figure 16 is a view showing an example of attribute 
information file 6020. This stores the user's name, age, sex, 
address and occupation etc. Figure 17 is a view showing an 
example of usage file 6030. This shows purchase history 
comprising the date and time of purchases using electronic 
settlement, the purchase identification number, the amount of 
the purchase and the credit card or bank card settlement 
completion date. Figure 18 is a view showing an example of an 
authentication data file 6040. In this, information known 
only to the user is registered as authentication data. This 
may be for example the name of the user's grandfather, the 
name of the user's grandmother, the user's mother's maiden 
name, the local district of the user's original domicile, the 
user's favorite author, or the primary school from which the 
user graduated. Whether the user is genuine or not can be 
established by randomly selecting an item of registered 
authentication data and posing to the user a question such as 
for example "what is your mother's maiden name?" making 
inquiry concerning the selected authentication data. 

Figure 20 is a view given in explanation of an example 
of an authentication system in which the authentication 
system is stored in an authentication system field of user 
information 6010. As the authentication system designated by 
the user or user terminal 20, type Ul is "no authentication 
specified"; in this case, the authentication system specified 
by register terminal 10 is employed. Type U2 involves 
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addition of password authentication and is used in the case 
where it is desired that the user must always be 
authenticated using a password. Type U3 is "visual 
authentication refusal"; this is used in the case where the 
user does not wish authentication to be performed by the 
cashier using data of a photograph of the user's face. Type 
U4 is the type in which the authentication system is varied 
depending on the amount of the purchase, in that password 
authentication must always be performed if the amount of the 
purchase is for example 5,000 Yen or more but otherwise 
authentication is not specified. 

Figure 21 is a view given in explanation of an 
authentication system in which agreement is reached between 
register terminal 10 and user terminal 20 in accordance with 
the authentication system specified by register terminal 10 
and the authentication system specified by user terminal 20. 
If no authentication system is specified by the user, the 
authentication system specified by the register terminal 10 
is actually performed. If no authentication system is 
specified by the user and register terminal 10 specifies no 
authentication, authentication is not performed. This is 
employed when electronic settlement is to be performed 
without authentication in cases such as settlement of small 
amounts. If the user does not specify an authentication 
system and register terminal 10 specifies visual 
authentication or password authentication, at least one of 
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vxsual authentication and password authentication is 
performed. For example, the cashier of register terminal 10 
may select one or other of visual authentication or password 
authentication or may perform password authentication in 
cases where user authentication by visual authentication is 
difficult. If the user does not specify an authentication 
system and register terminal 10 specifies only visual 
authentication, only visual authentication is actually 
performed. Even if the user cannot be authenticated by visual 
authentication, password authentication is still not 
performed. If the user does not specify an authentication 
system and register terminal 10 specifies only password 
authentication, only password authentication is actually 
performed and visual authentication cannot be performed. If 
the user does not specify an authentication system and 
register terminal 10 specifies visual authentication and 
password authentication, both visual authentication and 
password authentication are actually performed. For example, 
even if the user has successfully been authenticated by 
visual authentication, in order to improve the accuracy of 
authentication, password authentication is additionally 
performed. 

Next, the case where the user specifies the addition of 
password authentication will be described. By setting 
addition of password authentication, even if for example user 
terminal 20 exemplified by a mobile telephone or portable 

66 



terminal is lost, left behind or stolen, dishonest 
performance of electronic settlement by another person 
stealing the user terminal 20 can be prevented. If the user 
specifies addition of password authentication and register 
terminal 10 specifies visual authentication or password 
authentication, both visual authentication and password 
authentication are actually performed. With visual 
authentication alone, the accuracy of authentication 
specified by the user is not met, so in order to improve 
accuracy of authentication, even if the user has been 
successfully authenticated by visual authentication, password 
authentication is additionally performed. If the user 
specifies addition of password authentication and register 
terminal 10 specifies only visual authentication, both visual 
authentication and password authentication are actually 
performed. Although the register terminal 10 has specified 
only visual authentication, since the user has requested 
performance of authentication with a high degree of accuracy 
by the addition of password authentication rather than merely 
visual authentication, password authentication is performed 
in combination with the visual authentication. In this way, 
if the user has requested authentication accuracy higher than 
the authentication accuracy requested by register terminal 10, 
an authentication system of higher authentication accuracy is 
actually performed. If the user has specified addition of 
password authentication and register terminal 10 has 
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specified only password authentication, since the 
authentication accuracy required matches as between the 
register terminal 10 and the user, only password 
authentication is actually performed and visual 
authentication is not performed. If the user designates 
addition of password authentication and register terminal 10 
designates visual authentication and password authentication 
the requested authentication accuracy matches as between the 
register terminal 10 and the user, so both of visual 
authentication and password authentication are actually 
performed. 

Next, the case will be described where the user 
specifies that visual authentication is refused. By setting 
"refusal of visual authentication", the user can refuse 
performance of authentication by display of data of a 
photograph of the user's face on the register terminal 10. It 
the user has refused visual authentication and register 
terminal 10 has specified visual authentication or password 
authentication, since the user does not wish visual 
authentication to be performed, only password authentication 
is in fact performed. If the user has refused visual 
authentication and register terminal 10 has specified only 
visual authentication, since the authentication systems 
requested do not match as between the register terminal 10 
and the user, authentication is denied and the user cannot be 
authenticated. Consequently, electronic settlement cannot be 
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performed. If the user has refused visual authentication and 
register terminal 10 has specified only password 
authentication, password authentication is actually performed 
and visual authentication cannot be performed. If the user 
has refused visual authentication and register terminal 10 
has specified visual authentication and password 
authentication, since the visual authentication requested by 
register terminal 10 is refused by the user, agreement 
between the authentication systems of the register terminal 
10 and the user cannot be formulated, so authentication is 
denied and the user cannot be authenticated so electronic 
settlement is not performed. 

Figure 22 is a. flow chart of settlement processing of an 
electronic settlement system according to this embodiment. 
Figure 23 to Figure 27 are flowcharts illustrating details of 
the processing in Figure 22. 

Settlement processing will now be described with 
reference to Figure 22. The user is shopping for commercial 
products in a retail store and is paying the charge for the 
products at the register at the counter. On receiving a 
request from the user for settlement using electronic 
settlement, the cashier selects the electronic settlement 
menu item from the register terminal 10 and commences 
synchronous settlement (100) . The register terminal 10 then 
accesses (102) synchronization server 30. When register 
terminal 10 accesses synchronization server 30, it sends a 
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register registration number which is peculiar to this 
register terminal. 

In response to access from register terminal 10, 
synchronization server 30 initiates a connection with 
register terminal 10 and checks the register terminal 
information (104) using the register registration number that 
has been sent thereto from register terminal 10. 

The processing of register terminal information check 
104 will now be described with reference to Figure 23. 
Synchronization server 30 accesses (1042) register database 
50 and extracts (1044) register terminal information of the 
register terminal matching the register registration number. 
As indicated by way of example in Figure 14, as the register 
terminal information, there are registered the retail store 
name, shop name, register terminal number within the store 
and authentication system etc, in association with the 
register registration number. Synchronization server 30 
extracts (1046) the authentication system specified by the 
register terminal from the register terminal information. As 
shown by way of example in Figure 19, the authentication 
system specified by the register terminal may be a 
combination of a plurality of authentication systems such as 
visual authentication and password authentication or may be a 
system in which the authentication system is changed 
depending on the amount of the settlement. In addition, 
synchronization server 30 allocates a register number (1048) 
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to this register terminal 10. The register number is an 
identification number for the transaction that will 
subsequently be settled by this register terminal 10. 

Returning to Figure 22 , after the processing of register 
terminal information check 104 , the processing for 
transmitting (106) the register number to this register 
terminal 10 by synchronization server 30, the processing 
(108) for displaying the register number by register terminal 
10, the processing (110) whereby the cashier notifies the 
user of the register number, the processing (112) of the user 
inputting the register number of which the user has been 
notified, the processing (114) of sending to the 
synchronization server 30 the register number by user 
terminal 20, the processing (116) of receiving and checking 
the register number by synchronization server 30, the 
processing (118) of sending the synchronization signal to 
register terminal 10 by synchronization server 30, the 
processing (120) of turning on the synchronization lamp 706 
of register terminal 10 on receipt of the synchronization 
signal by register terminal 10, the processing (122) of 
transmitting the register terminal information to the user 
terminal 20 after synchronization has been commenced by 
synchronization server 30, the processing (124) for 
confirming whether the register terminal with which the user 
has synchronized is the correct one or not and the processing 
(12 6) of sending to synchronization server 30 a register 
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terminal information confirmation signal by user terminal 20 
is the same in operation as the corresponding processing of 
the first embodiment illustrated in Figure 5, so further 
description thereof is omitted. 

When synchronization server 30 receives the register 
terminal information confirmation signal transmitted from 
user terminal 20, it performs the processing of user 
information check 128. The processing of user information 
check 128 will be described with reference to Figure 24. 
Synchronization server 30 detects (1280) the user terminal 
number of user terminal 20. If user terminal 20 is a mobile 
telephone, the user terminal number is the call origination 
telephone number. Synchronization server 30 looks up (1282) 
the user information associated with the user terminal number 
by accessing user database 60. It ascertains whether or not 
user information is present associated with the user terminal 
number in user database 60 and confirms whether or not user 
terminal 20 is the subject of user registration (1284). If 
the user is not registered, it sends (1286) a message "not 
registered" to user terminal 20. A screen indicating that the 
user is not registered is displayed on user terminal 20 and 
synchronization server 30 releases (1290) the synchronization 
condition of register terminal 10 and user terminal 20 and 
terminates processing . 

If user registration is confirmed, the user information 
6010 is extracted (1292) from user database 60. As shown in 
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Figure 15, in user information 6010 there are stored user 
attribute information, the usage of electronic settlement by 
the user and the credit card number or bank card number, the 
amount of disposable funds and the authentication system 
designated by the user or user terminal 20. Synchronization 
server 30 extracts (1293) the authentication system 
designated by the user or user terminal 20. The details that 
are set by the user or user terminal 20 as the authentication 
system, as shown by the example of Figure 20, comprise 
whether high authentication accuracy has been requested as by 
addition of password authentication, whether a specific 
authentication system has been refused such as refusal of 
visual authentication and whether the authentication system 
is changed in accordance with the settlement amount etc. Next, 
it is ascertained (1294) whether or not there is a problem 
concerning the usage by the user of the credit card or bank 
card, from the information relating to the usage of 
electronic settlement by the user, which is stored in usage 
file 6030. If there is a problem concerning the usage, a 
message "not available for use" is sent (1296) to user 
terminal 20. A screen indicating that usage is not possible 
is displayed on user terminal 20 and synchronization server 
30 releases (1298) the synchronization condition of register 
terminal 10 and user terminal 20 and terminates processing. 

If there is no problem concerning the usage by the user, 
synchronization server 30 advances to the next processing. 

73 



The description returns to Figure 22. Synchronization server 
30 receives (134) the purchase amount information including 
the total purchase amount from register terminal 10. 
Synchronization server 30 performs user authentication (135) 
by means of "synchronous multi-authentication" in accordance 
with the authentication system specified by register terminal 
10 extracted in register terminal information check 104 and 
the authentication system specified by user terminal 20 
extracted in user information check 128. The "synchronous 
multi-authentication" is as described in the first embodiment 
but differs in that in this embodiment both register terminal 
10 and user terminal 20 can specify respective authentication 
systems and user authentication can be performed by 
determining an authentication system which can be agreed upon 
by adjusting the authentication systems requested by the 
register terminal 10 and user terminal 20. 

The processing of user authentication 135 will now be 
described with reference to Figure 25. Synchronization server 
30 determines (7000) the authentication system which is 
actually performed in accordance with the authentication 
system specified by register terminal 10 and the 
authentication system specified by user terminal 20. As shown 
in the example of Figure 21, the authentication system which 
is actually performed is determined by adjusting the 
authentication systems respectively specified by register 
terminal 10 and user terminal 20. If no authentication system 
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is present (7002) compatible with the authentication systems 
respectively specified by the register terminal 10 and user 
terminal 20, synchronization server 30 sends to user terminal 
20 a message indicating authentication incompatibility and a 
screen indicating that authentication has been denied due to 
incompatibility of authentication systems is displayed (7004) 
on user terminal 20 and processing is terminated. If no 
compatible authentication systems are present, processing 
advances to 7006 and user authentication is performed (7006) 
in accordance with the authentication system that was 
determined upon. 

As an example, the case will be described in which, in 
register terminal information check 104, visual 
authentication or password authentication is extracted as the 
authentication system specified by register terminal 10 and 
in user information check 128 addition of password 
authentication is extracted as the authentication system 
specified by user terminal 20. In this case, since the user 
has requested improvement of accuracy of authentication by 
the addition of password authentication, the authentication 
system that can be agreed between the cashier and the user is 
visual authentication and password authentication. 
Specifically, authentication accuracy is ensured in that, 
after visual authentication has been performed, password 
authentication is further performed. Figure 26 is a flow 
chart of user authentication processing 7006 when password 
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authentication is additionally performed after visual 
authentication has been performed. Synchronization server 30 
extracts (7007) data of a photograph of the face of the user 
from user database 60. Synchronization server 30 transmits 
(7008) the image data of the photograph of the face to 
register terminal 10. Register terminal 10 displays (7010) 
the image of the photograph of the user's face received from 
synchronization server 30. The cashier compares the user with 
the face photograph and establishes whether or not the user 
is genuine (7012). If it is doubtful whether the user is 
genuine, in response to instructions from the cashier, 
register terminal 10 sends (7018) to synchronization server 
30 a message to the effect that authentication was not 
successful and the screen displays the fact that 
authentication was not successful (7016) . If, by using the 
face photograph, it is verified that the user is genuine, in 
response to instructions from the cashier, register terminal 
10 sends (7013) to synchronization server 30 a signal 
indicating that visual authentication has succeeded. Register 
terminal 10 then displays a screen indicating that password 
authentication is in progress. Synchronization server 30 
receives from register terminal 10 the signal indicating 
success of visual authentication and performs password 
authentication (7014) . 

Figure 27 is a flow chart of the processing of password 
authentication 7014. In order to perform password 
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authentication, synchronization server 30 generates 
authentication data (1326) by acquiring the data necessary 
for authentication from user database 60. The authentication 
data are generated in the form of questions inquiring about 
registered authentication information based on authentication 
information registered by the user as shown by way of example 
in Figure 18. The registered authentication information is 
individual information known only to the genuine user. Also, 
since the questions are obtained by randomly selecting 
authentication information registered by the user, the 
likelihood of the authentication information being stolen and 
misused is low. Since the password authentication processing 
subsequent to processing 1328 is the same as the processing 
with the same reference number in the first embodiment shown 
in Figure 9, further description thereof is omitted. 

The description now returns to Figure 22. 
Synchronization server 30 executes processing 136 of checking 
the purchase amount and amount of disposable funds, using the 
purchase amount information received from register terminal 
10. Processing 136 of checking the purchase amount and amount 
of disposable funds may be performed prior to user 
authentication 135. Processing (136) of checking the purchase 
amount and amount of disposable funds, processing (138) in 
which synchronization server 30 sends total amount 
information including the purchase amount to user terminal 20, 
processing (140) in which user terminal 20 performs the final 
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confirmation of purchasing on receipt of the total amount 
information from synchronization server 30, processing (142) 
in which user terminal 20 sends a purchasing final 
confirmation signal to synchronization server 30, settlement 
processing (144) in which synchronization server 30 receives 
the purchasing final confirmation signal from user terminal 
20, accesses user account database 70 and records the 
purchasing information, processing (146) in which 
synchronization server 30 sends settlement completion 
notification to register terminal 10, processing (150) in 
which synchronization server 30 sends a receipt to user 
terminal 20, processing (148) in which register terminal 10 
displays a settlement completion screen, and processing (152) 
in which user terminal 20 displays a settlement completion 
screen are the same as in the case of the first embodiment so 
further description thereof is omitted. 

A further example of user authentication 135 using 
synchronous multi-authentication will now be described. If 
register terminal 10 designates visual authentication or 
password authentication and user terminal 20 has designated 
refusal of visual authentication, the authentication system 
which is actually performed is only password authentication. 
In this case, since the user has refused visual 
authentication, synchronization server 30 notifies register 
terminal 10 that password authentication will be performed 
instead. Register terminal 10 displays on the screen the fact 
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that, since the user has refused visual authentication, 
password authentication is being performed instead. 
Thereafter, the processing of password authentication 7014 is 
performed as in Figure 27. 

A further example of user authentication 135 using 
synchronous multi-authentication will now be described. This 
is a case in which register terminal 10 or user terminal 20 
has designated change of authentication system in accordance 
with the purchase amount. As an example, the case of 
designation of an authentication system may be considered 
wherein if the purchase amount is greater than the allowed 
amount, visual authentication and password authentication are 
performed but if the purchase amount is no more than the 
allowed amount, only visual authentication is performed. If 
both the register terminal 10 and user terminal 20 have 
specified that the authentication system should be changed 
depending on whether or not the purchase amount exceeds the 
allowed amount, it may be arranged to perform changeover of 
authentication system, taking as the allowed amount whichever 
is the least amount of the allowed amounts specified by the 
register terminal 10 and user terminal 20. Synchronization 
server 30 determines whether or not the user's purchase 
amount exceeds the allowed amount and, if the allowed amount 
is exceeded, performs processing 7006 for user authentication 
in the same way as in Figure 26. If the allowed amount is not 
exceeded, either only visual authentication may be performed 

79 



or, as in the processing of visual authentication 132 of the 
first embodiment shown in Figure 9, if visual authentication 
has succeeded, settlement may be proceeded with without 
performing password authentication and password 
authentication may be further performed only if visual 
authentication failed to confirm that the user is genuine. 

In the above description, a combination of visual 
authentication and password authentication was described as 
an example of "multi-authentication", but voice 
authentication could be added to the combination as an 
authentication system. In the case of password authentication, 
it takes some effort for the user to input the password from 
the user terminal 20 but in the case of voice authentication 
no effort is required for the input, since a comparison is 
made with the previously registered voice data simply by the 
user inputting voice to the mobile telephone constituting an 
example of user terminal 20; thus authentication can be 
performed in a convenient fashion. 

In an electronic settlement system according to this 
embodiment, both register terminal 10 and user terminal 20 
specify an authentication system and the user can be 
authenticated by determining an authentication system that is 
capable of being agreed between the retail store or cashier 
and the user. Consequently, the authentication system and 
authentication accuracy demanded by the user and the 
authentication system authentication accuracy demanded by the 
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cashier or retail store can be adjusted- Also, the 
authentication system can be altered in accordance with the 
purchase amount. 

(Third embodiment) 

A third embodiment of an electronic settlement system 
according to the present invention will now be described. In 
the first and second embodiment, synchronization server 30 
sent to the register terminal 10 a register number 
constituting an example of a transaction identification 
number identifying a transaction and the register terminal 10 
communicated this to the user by some means such as 
displaying the register number and the user input the 
register number to user terminal 20 so that the register 
number was sent to synchronization server 30 by the user 
terminal 20. In this way, the register terminal 10 that 
performs the transaction in question and user terminal 20 are 
identified by the register number, communication of register 
terminal 10 and user terminal 20 is synchronized and 
transaction settlement between register terminal 10 and user 
terminal 20 is performed. The third embodiment differs from 
the first and second embodiments in that synchronization of 
communication of register terminal 10 that performs the 
transaction in question and user terminal 20 is obtained by 
means of a transaction identification number, by 
synchronization server 30 sending the transaction 
identification number to the user terminal 20, user terminal 
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20 transmitting the transaction identification number to 
register terminal 10 and register terminal 10 sending the 
transaction identification number to synchronization server 
30; in this way transaction settlement between register 
terminal 10 and user terminal 20 is achieved. Only the parts 
which are different from the first and second embodiments 
will be described. 

Figure 28 is a diagram of register terminal 10. In 
contrast to the first and second embodiments, register 
terminal 10 further comprises a pattern code reading section 
710 that reads a pattern code such as a barcode or a cyber 
code constituting a two-dimensional barcode. Pattern code 
reading section 710 reads the pattern code displayed by user 
terminal 20 in display section 802. 

Figure 29 is a view illustrating an example in which a 
barcode is displayed on the display section 802 of user 
terminal 20. User terminal 20 converts the transaction 
identification number received from synchronization server 30 
into a barcode and displays this on display section 802. A 
message such as "please have the code read by the register- 
is concurrently displayed on display section 802 and the user 
of user terminal 20 presents the displayed barcode to the 
cashier of register terminal 10; the cashier of register 
terminal 10 then reads the barcode displayed on display 
section 802 of user terminal 20 using pattern code reading 
section 710 and thereby causes the transaction identification 
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number to be input to register terminal 10. The user can 
cause the barcode displayed on display section 802 of user 
terminal 20 to be read by operating pattern code reading 
section 710 of register terminal 10. 

Figure 30 is a view illustrating an example in which a 
cyber code is displayed on display section 802 of user 
terminal 20. User terminal 20 converts the transaction 
identification number received from synchronization server 30 
into a cyber code, which is a two-dimensional pattern code 
and displays this on display section 802. Pattern code 
reading section 710 of register terminal 10 acquires the 
transaction identification number by reading the cyber code 
displayed on display section 802 and inputs this to register 
terminal 10. 

Figure 31 is a flow chart of settlement processing of an 
electronic settlement system according to this embodiment. 
The user is shopping for commercial products in a retail 
store and pays the charges for the products at the counter 
register. On receipt of a request for settlement, by 
electronic settlement from the user, the cashier selects the 
electronic settlement menu item from register terminal 10 and 
begins synchronous settlement (100) . The user selects the 
electronic settlement menu item from user terminal 20 and 
commences synchronous settlement (101) . User terminal 20 
accesses (202) synchronization server 30. Using the call 
origination telephone number, which is one example of a user 
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terminal identification number, of user terminal 20, 
synchronization server 30 checks the user information (128). 
The processing of user information check 128 is the same as 
in the first or second embodiment so further description 
thereof is omitted. Synchronization server 30 allocates a 
transaction identification number that is peculiar to the 
transaction performed by user terminal 20 and sends (206) 
this to user terminal 20. User terminal 20 converts the 
transaction identification number received from 
synchronization server 30 into a barcode, which is one 
example of a pattern code and it displays this (208) on 
display section 802. The user presents (210) the barcode 
displayed on display section 802 of user terminal 20 to the 
cashier of register terminal 10. Using the pattern code 
reading section 710, the cashier of register terminal 10 
reads (212) the barcode displayed on display section 802 of 
user terminal 20. The barcode that is thus read is converted 
to the transaction identification number and this is thereby 
input to register terminal 10. Register terminal 10 accesses 
synchronization server 30 and sends thereto the register 
registration number, which is peculiar to register terminal 
10 and also sends (214) to synchronization server 30 the 
transaction identification number obtained from user terminal 
20. In response to the access from register terminal 10, 
synchronization server 30 initiates connection with register 
terminal 10 and checks (104) the register terminal 
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information under the register registration number that was 
sent from register terminal 10, The processing of register 
terminal information check 104 is the same as in the case of 
the first and second embodiments, so further description 
thereof is omitted. 

After the processing of register terminal information 
check 104 , synchronization server 30 checks (116) the 
transaction identification number received from register 
terminal 10. 

Synchronization server 30 is in a condition "awaiting 
access" in which it is waiting for access by register 
terminal 10 and sending of a transaction identification 
number. In the "awaiting access" condition, if there is a 
register terminal 10 that is performing access using the same 
transaction identification number as the transaction 
identification number allocated to the transaction performed 
by user terminal 20, synchronization server 30 establishes a 
one-to-one "synchronization" condition between register 
terminal 10 and user terminal 20 that are associated with the 
same transaction identification number and thereby achieves 
synchronization of register terminal 10 and user terminal 20. 

The transaction identification number is employed in 
order to achieve synchronization of communication by 
associating the register terminal 10 and user terminal 20 
that are performing the transaction identified by the 
transaction identification number. Consequently, once 
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"synchronization" in respect of the transaction 
identification number generated by synchronization server 30 
has been established and "awaiting access" has been cancelled, 
the same transaction identification number can be employed in 
other transactions without problem. Although the transaction 
identification number is a number that identifies a 
transaction, it does not need to be a number of many digits 
such as a transaction ID that is uniquely determined for all 
transactions; it is sufficient if after allocation to a 
transaction uniqueness is maintained in the time up to 
establishment of "synchronization". 

Waiting for access from register terminal 10 is limited 
to for example three minutes by setting a time-out in respect 
of the "awaiting access" condition of synchronization server 
30. If no access under the transaction identification number 
from register terminal 10 has taken place within the limiting 
time, synchronization server 30 cuts off the connection with 
user terminal 10 and performs initialization. This time-out 
function is set in order to avoid trouble if the pattern code 
reading section 710 of register terminal 10 fails to read the 
pattern code or if exchange of information is not performed 
normally, due to poor communication conditions between 
register terminal 10 and synchronization server 30. 

The processing of register number check 116 will now be 
described with reference to Figure 32. In Figure 32, 
synchronization server 30 ascertains (2162) whether, being in 
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an "awaiting access" condition, access is taking place from a 
user terminal and a transaction identification number has 
been sent from register terminal 10; if there has been no 
access, it ascertains (2164) whether or not the set time for 
time-out has elapsed; if the time-out time has elapsed, it 
disconnects (2166) user terminal 20 and terminates. 

When register terminal 10 sends the transaction 
identification number, it ascertains (1168) whether or not 
there is a user terminal 20 which is in the "awaiting 
synchronization" condition corresponding to this transaction 
identification number; if there is not, it sends a 
transaction identification number check error message (2170) 
to register terminal 10. A screen indicating the transaction 
identification number error is displayed (2172) by register 
terminal 10. The cashier of register terminal 10 again 
performs reading of the barcode (212) . 

If there is a user terminal 20 which is in an "awaiting 
synchronization" condition corresponding to a transaction 
identification number which is the same as the transaction 
identification number sent by register terminal 10, 
synchronization server 30 establishes a "synchronization" 
condition of the register terminal 10 and user terminal 20 
which are associated by the transaction identification number 
and establishes synchronization of communication with 
register terminal 10 and communication with user terminal 20. 
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Returning to Figure 31, the processing (118) whereby 
synchronization server 30 sends a synchronization signal to 
register terminal 10, the processing (120) whereby register 
terminal 10 receives the synchronization signal and turns on 
the synchronization lamp 706 of register terminal 10, the 
processing (122) whereby synchronization server 30, after 
synchronization has been commenced, transmits register 
terminal information to user terminal 20, the processing 
(124) of ascertaining whether or not there has been a mistake 
in the register terminal with which the user has synchronized 
and the processing (126) of user terminal 20 sending a 
register terminal information confirmation signal to 
synchronization server 30, the processing (134) of receiving 
purchase amount information from register terminal 10 by 
synchronization server 30, the user authentication processing 
(135) by synchronization server 30, the processing (136) of 
checking of the purchase amount and amount of disposable 
funds by synchronization server 30, the processing (138) of 
synchronization server 30 sending total amount information to 
the user terminal 20, the processing (140) of user terminal 
20 performing the final confirmation of purchasing, the 
processing (142) of user terminal 20 sending the purchasing 
final confirmation signal to synchronization server 30, the 
settlement processing (144) by synchronization server 30, the 
processing (146) of sending to register terminal 10 a 
settlement completion notification by synchronization server 

88 



30, the processing (150) of sending a receipt to user 
terminal 20 by synchronization server 30, the processing 
(148) of displaying a settlement completion screen on 
register terminal 10 and the processing (152) of displaying a 
settlement completion screen by user terminal 20 are the same 
as in the case of the second embodiment illustrated in Figure 
22, so further description thereof is omitted. 

Although, in the above description, user terminal 20 
displayed the transaction identification number received from 
synchronization server 30 in the form of a pattern code such 
as a barcode or cyber code, it would be possible for user 
terminal 20 to send this transaction identification number to 
register terminal 10 by communicating with register terminal 
10 using optical communication means such as infra-red 
communication or short-range wireless communication means 
such as Bluetooth. 

In the electronic settlement system of this embodiment, 
user terminal 20 receives the transaction identification 
number allocated by synchronization server 30 and displays 
this by pattern code such as barcode or cyber code so that it 
can be read by register terminal 10. Register terminal 10 
acquires the transaction identification number from the 
pattern code which has thus been read and sends this to 
synchronization server 30; association of user terminal 20 
and register terminal 10 by means of the transaction 
identification number is thereby achieved and settlement is 
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performed between the associated user terminal 20 and 
register terminal 10. The effort of the user inputting the 
transaction identification number is thereby eliminated, so 
electronic settlement can be performed in a convenient 
fashion . 

(Fourth embodiment) 

A fourth embodiment of an electronic settlement system 
according to the present invention will now be described. In 
an electronic settlement system according to this embodiment, 
when the user purchases a product from an automatic vending 
machine, settlement of the charge for the product can be 
performed through the network. 

Figure 33 is a layout diagram of an electronic 
settlement system according to this embodiment. The 
electronic settlement system according to this embodiment 
comprises an automatic vending machine 16 constituting an 
example of an invoicing terminal, user terminal 20 
constituting an example of a payment terminal, 
synchronization server 30 constituting an example of a 
settlement device, a carrier server 40, a register database 
50 constituting a example of an invoicing terminal database, 
a user database 60 constituting an example of a payment 
terminal database and a user account database 70. 

Automatic vending machine 16 can be connected to 
synchronization server 30 through a communication circuit. 
For the method of communication from automatic vending 
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machine 16 to synchronization server 30, any communication 
means such as communication using a telephone circuit, 
communication using a leased circuit, or wireless telephone 
communication may be employed. 

Other structural elements given the same reference 
symbols as in Figure 1 have the same operation and 
construction as in the first embodiment so further 
description thereof is omitted. 

Figure 34 is a diagram of an automatic vending machine 
16. Automatic vending machine 16 comprises buttons 900 for 
selecting products, an electronic settlement control panel 
902, a coin insertion unit 904 for insertion of coins and a 
product extraction port 906. Electronic settlement control 
panel 902 comprises a display unit 908 that displays the 
steps of electronic settlement, a start button 910 used to 
give instructions for commencement of electronic settlement 
and a cancel button 912 used to give instructions to cancel 
electronic settlement . 

The processing of settlement in an electronic settlement 
system according to this embodiment is described below using 
Figure 35 and Figure 36. Figure 35 is a flow chart of 
settlement processing of an electronic settlement system 
according to this embodiment. Figure 36 is an example screen 
of display section 802 of user terminal 20. 

Settlement processing will now be described with 
reference to Figure 35. The user selects the electronic 
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settlement menu item (401) of user terminal 20, presses the 
start button 910 of the automatic vending machine 16 and 
thereby commences electronic settlement (400) . Automatic 
vending machine 16 accesses synchronization server 30 (402) . 
When automatic vending machine 16 accesses synchronization 
server 30, a register registration number peculiar to this 
automatic vending machine 16 is sent. 

Synchronization server 30 initiates connection with 
automatic vending machine 16 in response to the access from 
automatic vending machine 16 and checks the register terminal 
information (404) using the register registration number that 
has been sent from automatic, vending machine 16. The 
processing from register terminal information check 404 to 
user information check 428 is the same as the processing from 
register terminal information check 104 to user information 
check 128 of the first embodiment illustrated in Figure 5 so 
further description is omitted. Regarding turning on of 
synchronization lamp 420, the automatic vending machine 16 
may be provided with a synchronization lamp and this 
synchronization lamp turned on, or the synchronization 
condition may be notified by means of text etc on display 
section 908. 

After the processing of user information check 428, 
synchronization server 30 sends a vending instruction (430) 
to automatic vending machine 16. When automatic vending 
machine 16 has received the vending instruction from 
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synchronization server 30, it allows the user to select (432) 
a product that is being sold by the automatic vending machine. 
When the user selects a product, automatic vending machine 16 
sends the purchase amount information (434) to 
synchronization server 30. 

Since the processing from the processing of check 436 of 
the purchase amount and amount of disposable funds up to the 
settlement processing 444 is the same as the processing from 
the processing of check 136 of the purchase amount and amount 
of disposable funds to the settlement processing 144 of the 
first embodiment shown in Fig. 5, further description thereof 
is omitted. 

When synchronization server 30 completes settlement 
processing 444, it communicates (446) a settlement completion 
notification to automatic vending machine 16. Automatic 
vending machine 16 then discharges the product selected by 
the user (448) . Synchronization server 30 sends a receipt 
indicating receipt of the charge for the product to user 
terminal 20 (452) . The receipt is displayed (454) on user 
terminal 20. 

All of the exchanges of data between automatic vending 
machine 16 and synchronization server 30 described above are 
performed through communication circuit 18 and the exchanges 
of data between user terminal 20 and synchronization server 
30 are performed through wireless communication transmission 
path 28 and communication circuit 38. No exchange of data is 
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performed between automatic vending machine 16 and user 
terminal 20. 

Communication (410) of the register number from automatic 
vending machine 16 to user terminal 20 is performed by 
automatic vending machine 16 displaying this register number 
on its; display section. As a further embodiment, automatic 
vending machine 16 may comprise an infra-red communication 
section as an example of a short-range communication section 
and in processing of communication (410) of the register 
number from automatic vending machine 16 to user terminal 20, 
the register number may be sent from the infra-red 
communication section of automatic vending machine 16 to the 
infra-red communication section 808 of user terminal 20 by 
infra-red communication. In this way, the effort of inputting 
the register number to user terminal 20 by the user is 
dispensed with and errors in inputting the register number 
can be eliminated. Also, as the means of sending the register 
number from automatic vending machine 16 to user terminal 20, 
automatic vending machine 16 and user terminal 20 may be 
provided with wireless communication sections as an example 
of short-range communication sections and the register number 
may be exchanged using wireless communication for mobile 
equipment such as the Bluetooth system. 

In the electronic communications system of this 
embodiment, in contrast to the first, second, third and 
fourth embodiments, visual authentication of the user, 
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password authentication, voice authentication, authentication 
using the iris or retina, or authentication using 
fingerprints etc are not performed. This is because in the 
product transactions performed by the automatic vending 
machine 16 the charges for the products are small amounts, so 
there is little need for user authentication. If user 
terminal 20 is a mobile telephone, due to the uniqueness of 
the call origination number of the mobile telephone, so long 
as the genuine keeper of the mobile telephone is employing 
the mobile telephone, the user can be identified from the 
call origination number of the mobile telephone, so in the 
case of settlement of small amounts few problems are caused 
by omitting the user authentication step. In this way, with 
the electronic settlement system of the present invention, an 
authentication system can be selected in accordance with 
differences of the magnitude of the settlement amount or mode 
of sale etc. 

(Fifth embodiment) 

A fifth embodiment of an electronic settlement system 
according to the present invention will now be described. In 
this embodiment of an electronic settlement system, the user 
connects to the Internet using a computer and can perform 
purchasing and settlement of products by accessing an online 
shopping server that is publicly available on the Internet. 

Figure 37 is a layout diagram of an electronic settlement 
system according to this embodiment. The electronic 
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settlement system of this embodiment comprises a register 
server 14, a virtual register terminal 12 constituting an 
example of an invoicing terminal, a user terminal 20 
constituting an example of a payment terminal, a 
synchronization server 30 constituting an example of a 
settlement device, a carrier server 40, a register database 
50 constituting an example of an invoicing terminal database, 
a user database 60 constituting an example of a payment 
terminal database, a user account database 70, a shopping 
server 24 and a user computer 22. 

Shopping server 24 is an online shopping server that is 
publicly available on Internet 26. User computer 22 is a 
computer of the user that is connected to Internet 26 and is 
capable of performing online shopping by accessing online 
server 24. 

Register server 14 is a server system that acts as an 
agent for sales in remote sales and comprises a virtual 
register terminal 12 within the server which performs 
invoicing of transactions with the user. 

Synchronization server 30 performs settlement processing 
of product transactions between the remote seller and the 
user. Synchronization server 30 performs data communication 
by connecting with register terminal 10 and user terminal 20 
through the communications network. 

The virtual register terminal 12 within register server 
14 performs data communication by connecting with 
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synchronization server 30 through a communications circuit 18. 
Communication circuit 18 may be either a telephone circuit or 
a leased circuit. 

User terminal 20 connects with carrier server 40 by means 
of wireless communication transmission path 28. Carrier 
server 40 connects with synchronization server 30 by means of 
communications circuit 38. No direct communication means 
exists between virtual register terminal 12 and user terminal 
20. 

Synchronization server 30 acquires information relating 
to invoicing for product transactions by communication with 
virtual register terminal 12, acquires information relating 
to payment of product transactions by communication with user 
terminal 20 and performs transaction settlement processing 
between virtual register terminal 12 and user terminal 20 by 
synchronizing communication with virtual register terminal 12 
and communication with user terminal 20. 

Other structural elements that are given the same 
reference symbols as in Figure 1 have the same operation and 
construction as in the case of the first embodiment so 
further description thereof is omitted. 

Hereinbelow, the step of processing for performing 
electronic settlement is illustrated with the user employing 
a user terminal in an electronic settlement system according 
to this embodiment, with reference to Figure 38 to Figure 43. 
Figure 38 is a fl ow chart of settlement processing of an 
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electronic settlement system according to this embodiment. 
Figure 39 to Figure 42 are flow charts showing details of the 
processing in Figure 38. Figure 43 is an example display 
screen of user computer 22. 

The user performs online shopping by connecting to 
Internet 26 using user computer 22 and accessing shopping 
server 24 connected to Internet 26. In online shopping, 
selection of products is performed while viewing the Web 
pages for shopping on shopping server 24. When the user has 
finished selecting products, a Web page indicating the 
details of the purchased products and the total amount is 
displayed as shown in Figure 43(a) on the display screen of 
user computer 22 and synchronous settlement is commenced 
(500) by the user selecting the button that gives 
instructions for synchronous settlement. User computer 22 
accesses register server 14 and purchase amount information 
including the total of the purchase amount is thereby sent 
(502) to register server 14. 

Register server 14 starts up the virtual register 
terminal (504). Virtual register terminal 12 is a device or 
process that plays the role of a register terminal and may be 
a terminal device provided in the register server or may be a 
program that is started up within the register server. 
Virtual register terminal 12 connects to synchronization 
server 30, sets a register number, which is one example of a 
transaction identification number for identifying the 
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transaction in question and sends this to synchronization 
server 30 (506) . 

Synchronization server 30 initiates connection with the 
virtual register terminal 12 in response to access from 
virtual register terminal 12 and checks (508) the register 
information (508) using the register registration number that 
has been sent thereto from virtual register terminal 10. 
Figure 39 illustrates the processing of register information 
check 508. The processing of register information check 508 
is the same as the processing of register information check 
206 of the second embodiment shown in Figure 17, so further 
description thereof is omitted. 

Register server 14 generates link information (510) and 
transmits (512) the link information to user computer 22. The 
screen shown in Figure 43(b) is displayed on the screen of 
user computer 22 by linked processing with register server 14. 
CGI (Common Gateway Interface) can be employed for the linked 
processing of user computer 22 and register server 14. The 
screen illustrated in Figure 43(b) shows the button "shopping 
details and description" and the button "synchronization 
register" . 

When the button "shopping details and description" is 
pressed, the purchasing details and purchase amount are 
displayed so that the purchasing details and price can be 
confirmed. To the button "synchronization register" there is 
appended "link information" to virtual register terminal 12 
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within register server 14. Consequently, by the user pressing 
the button "synchronization register", user computer 22 can 
be connected (514) with a specified virtual register terminal 
12 within register server 14. 

When the user presses the button "synchronization 
register", user computer 22 is connected with virtual 
register terminal 12 and a link information confirmation 
signal is sent to virtual register terminal 12 (516) . When 
virtual register terminal 12 receives the link information 
confirmation signal from user computer 22, it sends (518) the 
previously set register number to user computer 22. When user 
computer 22 receives the register number from virtual 
register terminal 12, as shown in Figure 43(c), it starts up 
the window of the register browser, so that the virtual 
register terminal is drawn in the window of the register 
browser and instructions to input the register number are 
displayed (520) . 

User computer 22 can notify (522) the user of the 
register number by displaying the register number in the 
window of the register browser. The user inputs (524) the 
register number displayed in the window of the register 
browser of user computer 22 at user terminal 20. The user 
terminal 20 sends (526) the register number input by the user 
to synchronization server 30. 

Synchronization server 30 checks the register number 
received from virtual register terminal 12 in processing 506 
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and the register number received from user terminal 20 in 
processing 526 and, if these register numbers match, 
synchronizes communication with virtual register terminal 12 
and communication with user terminal 20. Figure 40 shows the 
processing of register number check 528, Register number 
check 528 is the same as the register number check 116 of the 
first embodiment shown in Figure 7, so further description 
thereof is omitted. 

If the check of register numbers succeeds, 
synchronization server 30 sends (530) a synchronization 
signal to virtual register terminal 12, Virtual register 
terminal 12, when it receives the synchronization signal from 
synchronization server 30, sends a synchronization signal 
(532) to user computer 22. User computer 22, when it receives 
the synchronization signal from virtual register terminal 12, 
turns on the synchronization lamp (534) of the virtual 
register terminal that is drawn in the window of the register 
browser. In this way, the user can confirm that 
synchronization with the virtual register terminal 12 has 
been achieved. 

After the processing of the register number check 528, 
synchronization server 30 performs user information check 536 
and password authentication 538. The processing of the user 
information check 536 shown in Figure 41 is the same as the 
processing of user information check 128 of the first 
embodiment shown in Figure 8, so further description thereof 
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is omitted. The processing of password authentication 538 
shown in Figure 42 is the same as the processing of password 
authentication 210 of the first embodiment shown in Figure 9 
apart from the fact that there is no visual authentication so 
further description thereof is omitted. 

After the processing of password authentication 538, 
synchronization server 30 performs the processing of 540 of 
purchase amount and amount of disposable funds and of 
settlement processing 548 and user terminal 20 performs the 
processing of purchasing final confirmation 544. These 
processes are the same as in the first embodiment so further 
description thereof is omitted. 

Synchronization server 30 sends to virtual register 
terminal 12 (550) a settlement completion notification after 
the processing of settlement processing 548 and sends a 
receipt to user terminal 20. Virtual register terminal 12, 
when it receives the settlement completion notification from 
synchronization server 30, sends (552) a settlement 
completion notification to user computer 22. User computer 22 
effects display on the display screen conveying the fact that 
settlement has been completed. In this way the user can know 
that settlement of the transaction with the virtual register 
terminal 12 has been completed. 

In the above description, the virtual register terminal 
12 sets a register number constituting an example of a 
transaction identification number that identifies a 
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transaction and sends this to synchronization server 30; 
however, the method of allocating the register number is not 
restricted to this, so long as, when virtual register 
terminal 12 is connected with synchronization server 30, 
synchronization server 30 allocates a register number to the 
virtual register terminal 12 and sends the register number to 
the virtual register terminal 12. 

With an electronic settlement system according to this 
embodiment, a user can select a product that the user wishes 
to purchase by using a computer to access an online shopping 
server on the Internet and can perform settlement of the 
charge for the product using a user terminal such as a mobile 
telephone. 

In online shopping on the Internet, there is a security 
problem in sending a credit card number as data on the 
Internet so conventionally the credit card number is sent in 
encrypted form by using high-level encryption technology. 
However, with the electronic settlement system of this 
embodiment, although selection of a product that is desired 
to be purchased is performed on the Internet, settlement of 
the charges can be performed with safety using a mobile 
telephone or the like. In the electronic settlement system of 
this embodiment, exchange of information identifying the user 
and/or credit card information between the user terminal used 
for making the payment and the register terminal that effects 
invoicing cannot occur. There is therefore the advantage that 
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privacy is protected in that the user need have no anxiety 
that private information will become known to the seller. 
(Sixth embodiment) 

Synchronization servers 30 constituting examples of 
settlement devices in the electronic settlement systems of 
the first, second, third, fourth and fifth embodiments could 
be implemented by an ordinary computer. Figure 44 is a block 
diagram illustrating the hardware construction of an ordinary 
computer 600. In Figure 44, CPU 602 of computer 600 operates 
in accordance with programs stored in ROM 604 and RAM 606. 
The administrator of synchronization server 30 can input data 
and/or commands using input device 608. Hard disk drive 610 
constituting an example of a storage device stores setting 
information and the programs whereby CPU 602 operates. 

Floppy disk drive 614 reads data or programs from floppy 
disk 624 and provides these to CPU 602. CD-ROM drive 616 
reads data or programs from CD-ROM 626 and provides these to 
CPU 602. First communication interface 618 transmits and 
receives data, being connected to communication circuit 18. 
Second communication interface 620 transmits and receives 
data, being connected to communication circuit 38. Database 
interface 612 is connected with various types of database 622 
and transmits and receives data in the databases. In addition, 
synchronization server 30 comprises an interface for 
connection with display 628 whereby the administrator can 
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monitor the operating condition of the synchronization server 
30 using display 628 or can confirm the setting information. 

Figure 45 is a block diagram illustrating the structural 
units of software executed by CPU 602 shown in Figure 44. 
This software is provided to the user stored on a recording 
medium such as floppy disk 624 or CD-ROM 626. The software 
stored on the recording medium may be compressed or 
uncompressed. The software is installed on hard disk drive 
610 from the recording medium and is read into RAM 60 6 and 
executed by CPU 602. 

The software provided by being stored on the recording 
medium i.e. the software that is installed on hard drive 610 
comprises, as structural units, a settlement processing 
module 642, a first communication module 644, second 
communication module 646 and database look-up module 648. 

The processing that is made to be performed by CPU 602 by 
settlement processing module 642, first communication module 
64 4, second communication module 64 6 and database look-up 
module 648 acting on computer 600 is the same in function and 
operation as that of settlement processing section 80, first 
communication section 82, second communication section 84 and 
database look-up section 86 in the synchronization server 30 
of the first, second, third, fourth and fifth embodiments, 
respectively, so further description thereof is omitted. 

Part or all of the functioning of the operation of 
settlement devices according to all of the embodiments 
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described in the present application exemplified by 
synchronization servers 30 may be stored on recording media 
exemplified by floppy disk 624 or CD-ROM 626 as shown in 
Figure 44. Furthermore, if part of the operation of register 
terminal 10 described in the above embodiments is executed by. 
synchronization server 30 instead of register terminal 10, 
part of the operation of register terminal 10 described in 
the above embodiments may also be stored on floppy disk 624 
or CD-ROM 62 6. 

These programs may be executed by reading directly to RAM 
from the recording medium, or, once they have been installed 
on the hard disk drive, may be executed by reading to RAM 
therefrom. Furthermore, the programs may be stored on a 
single recording medium or may be stored on a plurality of 
recording media. Also, they may be stored in encoded form. 

As the recording media, apart from floppy disks or CD- 
ROMs, optical recording media such as DVDs, magnetic 
recording media such as MDs, magneto-optic recording media 
such as PDs, tape media, magnetic recording media, or 
semiconductor memories such as IC cards or miniature cards 
etc may be employed. Also, programs may be provided to 
synchronization server 30 through a communication network 
using as a recording medium a storage device such as a hard 
disk or RAM provided in the server system connected to a 
leased communication network or to the Internet. Such 
recording media are employed solely for manufacturing 
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synchronization servers 30 and it is clear that manufacture 
or sale by way of business of such recording media would 
constitute infringement of the patent right based on the 
present application. 

In the above description, the communication circuit 18 
for connecting register terminal 10, automatic vending 
machine 16 or register server 14 in the first, second, third, 
fourth, fifth and sixth embodiments with synchronization 
server 30 may be a telephone circuit or leased line or may be 
wireless communication or the Internet. If communication 
circuit 18 is the Internet, it is desirable to employ a safe 
communication system for guaranteeing security of 
communication with synchronization server 30. 

Also, it may be arranged for user terminal 20, register 
terminal 10 and register server 14 to detect the data type of 
the data exchanged with synchronization server 30 or the bit 
pattern by providing bit filtering means on the communication 
path between carrier server 40 and synchronization server 30 
and on the communication path between register terminal 10 or 
register server 14 and synchronization server 30. Since, 
according to the present invention, secret information such 
as private information of the user is not transmitted between 
user terminal 20 and register terminal 10 or register server 
14, there is no need for encryption of the data exchanged 
with synchronization server 30. Unanticipated access patterns 
can thereby be easily identified by monitoring the form of 
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data that is exchanged and/or the bit pattern by using the 
bit filtering means. Unauthorized penetration of the 
electronic settlement system and/or unauthorized access with 
destructive intent can therefore be detected. 

As described above, in an electronic settlement system 
according to the first embodiment, the register cashier of 
the retail store can authenticate a user by using data of a 
photograph of the user's face and in doubtful cases or in 
cases where the settlement is of high value, can further 
request the user to input a password, so accuracy of 
authentication can be increased in response to the 
circumstances. Also the user can perform settlement in a 
convenient and safe fashion by using portable equipment 
having a wireless communication function such as a mobile 
telephone or portable terminal. 

Also, in the electronic settlement system of the first 
embodiment, the synchronization server 30 associates the 
register terminal 10 and the user terminal 20 that are 
performing the transaction by means of a transaction 
identification number exemplified by a register number, so 
settlement can be completed without exchange of personal 
information such as the user's credit card number or bank 
account number between the register terminal 10 and user 
terminal 20 which have thus been associated. Electronic 
settlement can be performed in a safe fashion by the 
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convenient method of synchronization of communication using 
the register number. 

In the electronic settlement system of the second 
embodiment, both the register terminal 10 and user terminal 
20 specify an authentication system and the retail store or 
register cashier can authenticate the user by deciding on an 
authentication system agreed with the user. The 
authentication system and authentication accuracy required by 
the user and the authentication system and/or authentication 
accuracy required by the register cashier and/or retail store 
can therefore be adjusted. Also, the authentication system 
can be altered depending on the value of the purchase. 

In the electronic settlement system of the third 
embodiment, user terminal 20 receives a transaction 
identification number from synchronization server 30, this is 
displayed by a pattern code such as a barcode or cyber code 
and is read by register terminal 10. Register terminal 10 
acquires the transaction identification number from the 
pattern code which is thus read and user terminal 20 and 
register terminal 10 are associated by means of the 
transaction identification number by sending this to 
synchronization server 30; thus, settlement can be performed 
between the associated user terminal 20 and register terminal 
10 without exchanging private information of the user. 
Consequently, electronic settlement can be performed in a 
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convenient and safe fashion without the effort of the user 
inputting a transaction identification number. 

In the electronic settlement system of the fourth 
embodiment, product purchasing using an automatic vending 
machine and payment settlement can be performed in a 
convenient fashion through the network. 

In the electronic settlement system of the fifth 
embodiment, the user uses a computer to access an online 
shopping server on the Internet and selects a product that 
the user desires to purchase and settlement of charges for 
the product can be performed in safe fashion using a user 
terminal such as a mobile telephone. Although selection of 
the product that it is desired to purchase is performed on 
the Internet, settlement can be performed in a safe fashion 
by using a mobile telephone or the like for settlement of the 
charges, so privacy is protected and the user need have no 
anxiety concerning private information becoming known to the 
seller of the product. 

The electronic settlement system of the present invention 
has the following advantages for retail stores, remote sales, 
or sellers of online shopping on the Internet. Reliable user 
authentication can be achieved using the uniqueness of the 
call origination telephone number of the mobile telephone. 
Also, the accuracy of authentication can easily be altered in 
accordance with the amount of settlement and/or the place of 
the settlement by selecting the authentication system. In the 
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case of settlements of small amount such as purchases of 
products from an automatic vending machine, user 
authentication may be dispensed with and settlement performed 
identifying the user using merely the call origination 
telephone number of the mobile telephone. In the case of 
high-value settlements such as purchase of products at a 
jewelers shop, the sales cashier can perform authentication 
using data of a photograph of the user's face and, in 
doubtful cases, can reliably increase the accuracy of 
authentication by combining this with password authentication. 

Electronic settlement according to the present invention 
has the following advantages for the user. By carrying around 
a mobile telephone i.e. a communication terminal which is of 
excellent portability, payment for shopping can be performed 
electronically at any time or place and the need to carry 
around cash or a credit card, bank card or IC money card etc 
is eliminated. Also, by using the data packet communication 
function of the mobile telephone, the user can ascertain the 
amount of withdrawal from the account, the disposable balance 
and shopping history etc. 

Also, the electronic settlement system of the present 
invention has the following advantages for the credit card 
company. Dishonest use of credit cards can be prevented by an 
authentication system employing a mobile telephone. Since it 
becomes possible to perform credit settlement electronically 
using a mobile telephone, issue and administration of credit 
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cards becomes unnecessary, making it possible to reduce costs. 
Also, by employing a combined authentication system, even if 
data is dishonestly abstracted by a credit card company 
employee etc dishonest use of the user's payment account can 
be prevented. 

Although embodiments of the invention have been described 
above, the technical scope of the invention of the present 
application is not restricted to the embodiments described 
above. The invention set out in the patent claims could be 
put into practice with various modifications made to the 
above embodiments. It is clear from the stated scope of the 
claims that such inventions fall within the technical scope 
of the invention according to the present application. 

INDUSTRIAL APPT.T CABTT.TTY 

As will be clear from the above description, with the 
present invention, settlement of transactions for products 
can be performed in a safe and convenient fashion through a 
network. 
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1. An electronic settlement system for settlement of 
transactions using a communication network, comprising: 

a settlement device that performs said transaction 
settlement; 

an invoicing terminal that is connected with said 
settlement device through said communication network and 
performs invoicing in said transaction; and 

a payment terminal that is connected with said settlement 
device through said communication network and performs 
payment in said transaction, 

characterized in that said settlement device sets a 
transaction identification number that identifies said 
transaction and, when said payment terminal sends to this 
settlement device a transaction identification number that is 
the same as said transaction identification number, effects 
settlement of said transaction by synchronizing communication 
with said invoicing terminal and communication with said 
payment terminal, 

2. The electronic settlement system according to claim 1, 
characterized in that said invoicing terminal is connected 
with said settlement device through a telephone circuit or 
leased circuit, and said payment terminal is connected with 
said settlement terminal by wireless telephone communication. 

3. A settlement device that, by communicating with an 
invoicing terminal that performs invoicing in a transaction 

113 



and a payment terminal that performs payment in said 
transaction, effects settlement of said transaction, 
characterized in that it comprises: 

a first communication section connected with said 
invoicing terminal through a first communication network; 

a second communication section connected with said 
payment terminal through a second communication network; and 

a processing section that performs settlement processing 
of said transaction; and in that said processing section sets 
a transaction identification number that identifies said 
transaction and, if said payment terminal sends to this 
settlement device a transaction identification number that is 
the same as said transaction identification number, 
synchronizes communication with said invoicing terminal and 
communication with said payment terminal, 

4. The settlement device according to claim 3, 
characterized in that said first communication section is 
connected with said invoicing terminal through the Internet, 
a telephone circuit or a leased circuit, and said second 
communication section is connected with said payment terminal 
by wireless telephone communication. 

5. The settlement device according to claim 4, 
characterized in that said first communication section sends 
said transaction identification number that identifies said 
transaction to said invoicing terminal, and 
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said invoicing terminal notifies said payment terminal or 
the user of said payment terminal of said transaction 
identification number and, if said payment terminal sends to 
this settlement device a transaction identification number 
that is the same as said transaction identification number, 
said processing section synchronizes communication with said 
invoicing terminal and communication with said payment 
terminal, and said first communication section sends to said 
invoicing terminal a synchronization confirmation signal 
indicating that synchronization has been established. 

6. The settlement device according to claim 5, 
characterized in that said processing section performs 
settlement processing of said transaction between said 
invoicing terminal and said payment terminal that have been 
synchronized by said transaction identification number. 

7. The settlement device according to claim 6, 
characterized in that said first communication section 
receives from said invoicing terminal the purchase amount in 
said transaction, and 

said processing section performs settlement processing of 
said transaction in respect of the user of said payment 
terminal, using said purchase amount that said first 
communication section has received from said invoicing 
terminal. 

8. The settlement device according to claim 6, 
characterized in that: 
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said first communication section receives from said 
invoicing section the purchase amount in said transaction; 

said second communication section sends to the payment 
terminal said purchase amount so that said purchase amount i 
confirmed by said payment terminal, and receives from said 
payment terminal a purchase final confirmation signal 
confirming said purchase amount; 

said processing section performs settlement processing 
after said second communication section has received said 
purchase final confirmation signal from said payment 
terminal; 

said first communication section sends to said invoicing 
terminal a settlement completion notification that gives 
notification of completion of said settlement processing by 
said processing section; and 

said second communication section sends said payment 
terminal a receipt giving notification of receipt of said 
purchase amount in said settlement processing by said 
processing section. 

9. The settlement device according to claim 6, further 
comprising an invoicing terminal database that stores 
information relating to said invoicing terminals, and 
characterized in that: 

said first communication section receives an 
identification number that identifies said invoicing terminal 
from said invoicing terminals; and 
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said processing section confirms registration of said 
invoicing terminal by using said identification number to 
extract information relating to said invoicing terminal from 
said invoicing terminal database. 

10. The settlement device according to claim 9, 
characterized in that said second communication section sends 
to said payment terminal said information relating to said 
invoicing terminal extracted from said invoicing terminal 
database in order for said payment terminal to confirm said 
invoicing terminal . 

11. The settlement device according to claim 6, it 
further comprising a payment terminal database that stores 
information relating to said payment terminals and 
characterized in that: 

said second communication section detects the call 
origination telephone number of said payment terminal; and 

said processing section confirms at least one of the 
state of registration of said user, usage by said user and 
disposable funds of said user by extracting information 
relating to the user of said payment terminal from said 
payment terminal database, using said call origination 
telephone number. 

12. The settlement device according to claim 11, 
characterized in that said processing section extracts at 
least some of attribute information of said user of said 
payment terminal from said payment terminal database, and 
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said first communication section sends said at least some 
attribute information of said user to said invoicing terminal 

13. The settlement device according to claim 11, 
characterized in that if said second communication section 
receives a message requesting purchase history information of 
said user of said payment terminal, said processing section 
extracts said purchase history information of said user from 
said payment terminal database and said second communication 
section sends said purchase history information to said 
payment terminal. 

14. The settlement device according to claim 5, 
characterized in that: 

said processing section extracts authentication 
information of said user of said payment terminal from said 
payment terminal database; and 

said first Communication section sends to said invoicing 
terminal said authentication information of said user in 
order for said invoicing terminal to authenticate said user. 

15. The settlement device according to claim 14, 
characterized in that said authentication information of said 
user is a photograph of the face of said user. 

16. The settlement device according to claim 15, 
characterized in that said first communication section 
receives from said invoicing terminal a signal requesting 
password authentication of said user; 
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said processing section extracts information relating to 
the password of said user of said payment terminal from said 
payment terminal database; 

said second communication section sends an instruction 
requesting a password to said payment terminal arid receives 
from said payment terminal a password input at said payment 
terminal; 

said processing section compares said password received 
from said payment terminal with said information relating to 
said password extracted from said payment terminal database; 
and 

said first communication section authenticates said user 
by sending to said invoicing terminal the result of 
comparison of the password by said processing section. 

17. The settlement device according to claim 5, 
characterized in that: 

said processing section extracts authentication 
information registered by said user of said payment terminal 
from said payment terminal database; 

said second communication section sends to said payment 
terminal an instruction to inquire about said authentication 
information and receives from said payment terminal a 
response input at said payment terminal in respect of said 
instruction; and 

said processing section authenticates said user by 
comparing said response received from said payment terminal 
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with said authentication information extracted from said 
payment terminal database. 

18. The settlement device according to claim 17, 
characterized in that said first communication section 
notifies said invoicing terminal of the result of 
authentication of said user by sending to said invoicing 
terminal the result of comparison by said processing section. 

19. The settlement device according to claim 17, 
characterized in that said payment terminal database stores a 
plurality of items of authentication information registered 
by said user and said processing section extracts randomly at 
least one of said plurality of items of authentication 
information from said payment terminal database. 

20. The settlement device according to claim 5, 
characterized in that said invoicing terminal database stores 
authentication systems requested by said invoicing terminals 
and said payment terminal database stores authentication 
systems requested by said users; and 

said processing section extracts the authentication 
system requested by said invoicing terminal from said 
invoicing terminal database and extracts the authentication 
system requested by said user from said payment terminal 
database, and authenticates said user by determining an 
authentication system that can be agreed in accordance with 
said authentication system requested by said invoicing 



120 



terminal and said authentication system requested by said 
user. 

21. The settlement device according to claim 20, 
characterized in that, if the authentication accuracy of said 
authentication system requested by said invoicing terminal 
and the authentication accuracy of said authentication system 
requested by said user are different, the authentication 
system of higher authentication accuracy is designated as 
said authentication system that can be agreed. 

22. The settlement device according to claim 20, 
characterized in that, if said authentication system 
requested by said invoicing terminal and said authentication 
system requested by said user are not compatible, said 
processing section refuses authentication of said user, and 
said second communication section sends to said payment 
terminal information indicating that authentication has been 
denied. 

23. The settlement device according to claim 20 to 22, 
characterized in that said authentication system that is 
requested by said invoicing terminal and said user comprises 
particulars specifying at least one of visual authentication 
using photographic data of the user's face, password 
authentication using authentication information registered by 
said user as a password, or voice authentication using voice 
data registered by said user. 
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24. The settlement device according to claim 23, 
characterized in that, if said authentication system 
requested by said user comprises particulars specifying 
refusal of said visual authentication and said authentication 
system requested by said invoicing terminal comprises 
particulars to the effect that said visual authentication is 
not necessary, said processing section does not include said 
visual authentication in the authentication system that can 
be agreed. 

25. The settlement device according to claim 23, 
characterized in that, if said authentication system 
requested by said user comprises particulars specifying 
refusal of said visual authentication and said authentication 
system requested by said invoicing terminal comprises 
particulars specifying that said visual authentication is 
necessary, said processing section refuses authentication of 
said user, and said second communication section sends to 
said payment terminal information indicating that 
authentication has been refused since agreement regarding the 
authentication system cannot be obtained. 

26. The settlement system according to claim 23, 
characterized in that, if said authentication system 
requested by said user comprises particulars specifying 
addition of said password authentication, said processing 
section establishes said authentication system that can be 
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agreed by combining said password authentication with said 
authentication system requested by said invoicing terminal. 

27. An invoicing terminal that performs invoicing in a 
transaction in respect of a payment terminal that performs 
payment in said transaction by communicating with a 
settlement device that performs settlement of said 
transaction, characterized in that it comprises: 

a communication section connected with said settlement 
device through a communication network; and 

a processing section that performs invoicing processing 
in said transaction; and 

in that said communication section sends to said 
settlement device an identification number identifying the 
invoicing terminal in question and receives from said 
settlement device a synchronization confirmation signal 
indicating that synchronization has been established with 
said payment terminal. 

28. The invoicing terminal according to claim 27, 
characterized in that said communication section is connected 
with said settlement device by using one or other of the 
Internet, a telephone circuit, a leased circuit or wireless 
telephone communication. 

29. The invoicing terminal according to claim 28, 
characterized in that: 
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said communication section receives from said settlement 
device a transaction identification number that identifies 
said transaction; 

the invoicing terminal further comprises a display 
section that displays said transaction identification number 
for notifying the user of said payment terminal of said 
transaction identification number; and 

when said payment terminal sends to said settlement 
device a transaction identification number that is the same 
as said transaction identification number, said communication 
section receives from said settlement device a 
synchronization confirmation signal indicating that 
synchronization has been established with said payment 
terminal . 

30. The invoicing terminal according to claim 28, 
characterized in that: 

said communication section receives from said settlement 
device a transaction identification number that identifies 
said transaction; 

the invoicing terminal further comprises a short-range 
communication section that communicates with said payment 
terminal by optical communication or wireless communication 
to send said transaction identification number to said 
payment terminal; and 

when said payment terminal sends to said settlement 
device a transaction identification number that is the same 
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as said transaction identification number, said communication 
section receives from said settlement device a 
synchronization confirmation signal indicating that 
synchronization has been established with said payment 
terminal. 

31. The invoicing terminal according to claim 29 or 30, 
characterized in that, if said communication section has 
received, from said settlement device, said synchronization 
confirmation signal indicating that synchronization with said 
payment terminal has been established has been received, 
settlement processing of said transaction is performed with 
said payment terminal with which synchronization has been 
achieved. 

32. The invoicing terminal according to claim 31, 
characterized in that said communication section sends to 
said settlement device the purchase amount in said 
transaction, and, if said settlement device has performed the 
settlement processing of said transaction in respect of the 
user of said payment terminal with which synchronization has 
been achieved, said communication section receives, from said 
settlement device, settlement completion notification giving 
notice of completion of said settlement processing. 

33. The invoicing terminal according to claim 31, 
characterized in that said communication section receives at 
least some of attribute information of the user of said 
payment terminal from said settlement device. 
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34. The invoicing terminal according to claim 33, 
characterized in that: 

said communication section receives from said settlement 
device authentication information of said user of said 
payment terminal; and 

said processing section authenticates said user using 
said authentication information received from said settlement 
device. 

35. The invoicing terminal according to claim 34, 
characterized in that said authentication information of said 
user is a photograph of the face of said user. 

36. The invoicing terminal according to claim 35, 
characterized in that if said processing section has not been 
able to authenticate said user by said photograph of said 
user, said communication section sends to said settlement 
device a signal seeking authentication of said user by means 
of a password and receives from said settlement device the 
result of authentication using said password. 

37. The invoicing terminal according to claim 33, 
characterized in that: 

the invoicing terminal further comprises a product 
selection section that is capable of allowing said user of 
said payment terminal to select a product that he/she desires 
to purchase, and a product discharge section that discharges 
the product that has been purchased; 
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if said communication section has received from said 
settlement device a synchronization confirmation signal 
indicating that synchronization with said payment terminal 
has been established, said product selection section allows 
said user to select a product; and 

said communication section sends to said settlement 
device the value of the product selected by said user as said 
purchase amount of said transaction, and, if said settlement 
completion notification is received from said settlement 
device, said product discharging section discharges said 
product selected by said user in accordance with said 
settlement completion notification. 

38. An invoicing terminal that performs invoicing in a 
transaction in respect of a payment terminal that performs 
payment in said transaction by communicating with a 
settlement device that performs settlement of said 
transaction, and that provides information in respect of said 
transaction by communicating with a computer terminal that 
displays the state of said transaction, characterized in 
that: 

said invoicing terminal comprises: 

a first communication section connected with said 
settlement device through a communication network; 

a second communication section connected with said 
computer terminal through a communication network; and 
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a processing section that performs invoicing processing 
in said transaction; 

and in that said first communication section sends to 
said settlement device an identification number identifying 
the invoicing terminal in question and receives from said 
settlement device a transaction identification number that 
identifies said transaction; 

said second communication section sends to said computer 
terminal said transaction identification number for giving 
notification of said transaction identification number to the 
user of said payment terminal; and 

said first communication section further receives from 
said settlement device a synchronization confirmation signal 
indicating that synchronization has been established with 
said payment terminal. 

39. The invoicing terminal according to claim 38, 
characterized in that said first communication section, when 
said synchronization confirmation signal indicating that 
synchronization with said payment terminal has been 
established is received from said settlement device, performs 
settlement processing of said transaction with said payment 
terminal with which synchronization has been established. 

40. The invoicing terminal according to claim 39 
characterized in that: 

said second communication section receives the purchase 
amount in said transaction from said computer terminal; and 
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said first communication section sends said purchase 
amount to said settlement device, and, if said settlement 
device has performed settlement processing of said 
transaction with respect to the user of said payment terminal 
with which synchronization has been obtained, receives from 
said settlement device a settlement completion notification, 
that gives notification of completion of said settlement 
processing. 

41. The invoicing terminal according to claim 40 
characterized in that said second communication section sends 
to said computer terminal at least one of said 
synchronization confirmation signal and said settlement 
completion notification received from said settlement device 
by said first communication section, in order for said 
computer terminal to display the state of said transaction. 

42. An authentication device that, by communicating with 
a first terminal and a second terminal that requests 
authentication of the user of the first terminal, performs 
said authentication requested by the second terminal, 
characterized in that it comprises: 

a user database that stores authentication information 
registered by the user of said first terminal; 

a first communication section connected with said first 
terminal through a first communication network; 

a second communication section connected with said second 
terminal through a second communication network; and 
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a processing section that performs said authentication; 
and characterized in that: 

said processing section sets an identification number 
that identifies said authentication requested by said second 
terminal and, if said first terminal sends to this 
authentication device the same authentication number as said 
authentication number, synchronizes communication with said 
first terminal and communication with said second terminal; 

said second communication section receives from said 
second terminal an authentication request for authenticating 
said user of said first terminal ; 

said processing section extracts from said user database 
authentication information for authenticating said user of 
said first terminal; 

said first communication section sends to said first 
terminal an instruction for making inquiry concerning said 
authentication information and receives from said first 
terminal a response input in respect of said instruction by 
said first terminal; 

said processing section authenticates said user of said 
first terminal by comparing said response received from said 
first terminal with said authentication information extracted 
from said database; and 

said second communication section authenticates the user 
of said first terminal by sending to said second terminal the 
result of authentication by said processing section. 
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43. The authentication device according to claim 42 , 
characterized in that said authentication information 
registered by said user of said first terminal and extracted 
from said database by said processing section is at least one 
of a password of said user, voice data generated by said user, 
image data of the face of said user, image data of the iris 

or retina of the eye of said user, or image data of the 

fingerprints of said user and said response received from 

said first terminal for comparison with said authentication 

# 

information by said processing section is at least one of 
text data, voice data or image data. 

44. A recording medium on which is stored a program for a 
computer that performs settlement of a transaction by 
communicating with an invoicing terminal that performs 
invoicing in a transaction and a payment terminal that 
performs payment in said transaction, characterized in that 
said program comprises: 

a first communication module for effecting communication 
with said invoicing terminal through a telephone circuit or 
leased circuit; 

a second communication module for effecting communication 
with said payment terminal through wireless telephone 
communication; and 

a processing module for effecting settlement processing 
of said transaction; 
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and in that said processing module sets a transaction 
identification number that identifies said transaction and, 
if said payment terminal sends to this computer a transaction 
identification number that is the same as said transaction 
identification number, synchronizes communication with said 
invoicing terminal and communication with said payment 
terminal . 

. - - 45. A business method carried out by a settling party - 
that mediates settlement in a transaction between an 
invoicing party that effects invoicing in said transaction 
and a paying party that effects payment in said transaction, 
characterized in that it comprises: 

a step in which a transaction identification number of 
said transaction for identifying said transaction is set by 
said settling party; 

a step whereby said transaction identification number is 
communicated to said invoicing party; 

a step whereby said transaction identification number is 
communicated to said paying party by said invoicing party; 
and 

a step whereby, if a transaction identification number 
that is the same as said transaction identification number is 
communicated to said settling party by said paying party, 
settlement processing of said transaction is. performed 
between said invoicing party and said paying party associated 
by said transaction identification number. 
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4 6. A settlement method in a settlement device that 
performs settlement of a transaction by communicating with an 
invoicing terminal that performs invoicing in the transaction 
and a payment terminal that performs payment in said 
transaction, characterized in that it comprises: 

a step of setting a transaction identification number 
that identifies said transaction; 

a step of sending said transaction identification number 
to said invoicing terminal; 

a step in which said invoicing terminal notifies said 
payment terminal or the user of said payment terminal of said 
transaction identification number, and, if said payment 
terminal has sent to said settlement device a transaction 
identification number that is the same as said transaction 
identification number, synchronizes communication with said 
invoicing terminal and communication with said payment 
terminal; 

a step of sending to said invoicing terminal a 
synchronization confirmation signal indicating that 
synchronization has been established; and 

a step of performing settlement processing of said 
transaction between said invoicing terminal and said payment 
terminal synchronized based on said transaction 
identification number. 

47. A settlement device that performs settlement of a 
transaction by communicating with an invoicing terminal that 
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performs invoicing in the transaction and a payment terminal 
that performs payment in said transaction, characterized in 
that it comprises: 

a first communication section connected with said 
invoicing terminal through a first communication network; 

a second communication section connected with said 
payment terminal through a second communication network; and 

a processing section that performs settlement processing 
of said transaction; 

and in that said processing section sets a transaction 
identification number that identifies the transaction 
performed by said payment terminal and, if said invoicing 
terminal sends to this settlement device a transaction 
identification number that is the same as said transaction 
identification number, synchronizes communication with said 
invoicing terminal and communication with said payment 
terminal . 

48. The settlement device according to claim 47, 
characterized in that it said first communication section 
sends to said payment terminal said transaction 
identification number that identifies said transaction; and 

said payment terminal transmits said transaction 
identification number to said invoicing terminal and, if said 
invoicing terminal sends to this settlement device a 
transaction identification number that is the same as said 
transaction identification number, said processing section 
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synchronizes communication with said invoicing terminal and 
communication with said payment terminal and said first 
communication section sends to said invoicing terminal a 
synchronization confirmation signal indicating that 
synchronization has been established. 

49. The settlement device according to claim 48, 
characterized in that said processing section performs 
settlement processing of said transaction between said 
invoicing terminal and said payment terminal that have been 
synchronized by said transaction identification number. 

50. An invoicing terminal that performs invoicing in a 
transaction in respect of a payment terminal that performs 
payment in said transaction by communicating with a 
settlement device that performs settlement of the transaction, 
characterized in that said invoicing terminal comprises: 

a communication section connected with said settlement 
device through a communication network; and 

a processing section that performs invoicing processing 
in said transaction; 

and wherein said communication section sends to said 
settlement device a transaction identification number that 
identifies said transaction and that has been transmitted 
from said payment terminal and receives from said settlement 
device a synchronization confirmation signal that indicates 
that synchronization has been established with said payment 
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terminal that performs the transaction identified by said 
transaction identification number. 

51. The invoicing terminal according to claim 50, 
characterized by further comprising a pattern code reading 
section that acquires said transaction identification number 
by reading a pattern code such as a barcode or cyber code 
that is obtained by converting said transaction 
identification number into pattern form and displayed by said 
payment terminal; 

and characterized in that said communication section 
sends to said settlement device said transaction 
identification number acquired by said pattern code reading 
section and receives from said settlement device a 
synchronization confirmation signal indicating that 
synchronization has been established with said payment 
terminal that performs the transaction identified by said 
transaction identification number. 

52. The invoicing terminal according to claim 50 
characterized by further comprising a short range 
communication section that communicates with said payment 
terminal by optical communication or wireless communication 
and that receives said transaction identification number from 
said payment terminal; 

and characterized in in that said communication section 
sends to said settlement device said transaction 
identification number and receives from the settlement device 
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a synchronization confirmation signal indicating that 
synchronization has been established with said payment 
terminal that performs the transaction identified by said 
transaction identification number. 

53. The invoicing terminal according to claim 51 or 52 , 
characterized in that if said communication section has 
received from said settlement device said synchronization 
confirmation signal indicating that synchronization with said 
payment terminal has been established, said processing 
section performs invoicing processing of said transaction in 
respect of said payment terminal with which synchronization 
has been obtained. 
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414 REGISTER NUMBER TRANSMITTED 
416 REGISTER NUMBER CHECK 

418 SYNCHRONIZATION SIGNAL TRANSMITTED 422 REGISTER TERMINAL 
INFORMATION TRANSMITTED 

420 SYNCHRONIZATION LAMP TURNED ON 424 HAS REGISTER 

TERMINAL INFORMATION BEEN CONFIRMED? 

42 6 TRANSMIT" REGISTER TERMINAL INFORMATION CONFIRMATION 
SIGNAL 

428 USER INFORMATION CHECK 

4 30 TRANSMIT VENDING INSTRUCTION 4 00 

432 PRODUCT SELECTION 

4 34 TRANSMIT PURCHASE AMOUNT INFORMATION 

436 CHECK PURCHASE AMOUNT AND AMOUNT OF DISPOSABLE FUNDS 
4 38 TRANSMIT TOTAL VALUE INFORMATION 
4 40 FINAL CONFIRMATION OF PURCHASE 

442 TRANSMIT FINAL CONFIRMATION OF PURCHASE SIGNAL 

44 4 SETTLEMENT PROCESSING 

44 6 SETTLEMENT COMPLETION NOTIFICATION 

44 8 DISCHARGE PRODUCT 

4 50 TERMINATE SYNCHRONOUS SETTLEMENT 
4 52 COMMUNICATE RECEIPT 
454 DISPLAY RECEIPT 

FIGURE 36 

(A) SHINJUKU AUTOMATIC VENDING MACHINE NUMBER 135 
[CANCEL] 
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(B) SHINJUKU AUTOMATIC VENDING MACHINE NUMBER 135 

[THE CHARGE IS] 120 YEN 

[CANCEL] 

FIGURE 37 

12 VIRTUAL REGISTER TERMINAL 
12 VIRTUAL REGISTER TERMINAL 
12 VIRTUAL REGISTER TERMINAL 
14 REGISTER SERVER 
20 USER TERMINAL 
22 USER COMPUTER 
24 SHOPPING SERVER 
26 INTERNET 

30 SYNCHRONIZATION SERVER 

4 0 CARRIER SERVER 

50 REGISTER DB 

60 USER DB 

70 USER ACCOUNT DB 

FIGURE 38 

USER COMPUTER REGISTER SERVER SYNCHRONIZATION SERVER 

USER TERMINAL 

500 SYNCHRONOUS SETTLEMENT COMMENCED 

501 SYNCHRONOUS SETTLEMENT COMMENCED 

502 TRANSMIT PURCHASE AMOUNT INFORMATION 
504 VIRTUAL REGISTER TERMINAL ESTABLISHED 
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506 TRANSMIT REGISTER NUMBER 
508 REGISTER INFORMATION CHECK 
510 LINK INFORMATION CREATED 
512 LINK INFORMATION TRANSMITTED 
514 LINK INFORMATION CONFIRMED 

516 TRANSMIT LINK INFORMATION CONFIRMATION SIGNAL 

518 REGISTER NUMBER TRANSMITTED 

520 .REGISTER NUMBER DISPLAY 

522 REGISTER NUMBER COMMUNICATION 

524 REGISTER NUMBER INPUT 

52 6 REGISTER NUMBER TRANSMITTED 

528 REGISTER NUMBER CHECK 

530 SYNCHRONIZATION SIGNAL TRANSMITTED 
532 SYNCHRONIZATION SIGNAL SENT 
534 SYNCHRONIZATION LAMP DISPLAY 
536 USER INFORMATION CHECK 
538 PASSWORD AUTHENTICATION 

540 CHECK OF PURCHASE AMOUNT AND AMOUNT OF DISPOSABLE FUNDS 
542 TOTAL VALUE INFORMATION TRANSMITTED 
54 4 FINAL CONFIRMATION OF PURCHASE 

54 6 TRANSMISSION OF FINAL CONFIRMATION OF PURCHASE SIGNAL AND 

54 8 SETTLEMENT PROCESSING 

550 SETTLEMENT COMPLETION NOTIFICATION 

552 SETTLEMENT COMPLETION NOTIFICATION 

554 SYNCHRONOUS SETTLEMENT TERMINATED 

556 RECEIPT COMMUNICATED 
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558 RECEIPT DISPLAYED 
FIGURE 39 

5082 ACCESS REGISTER DATABASE 

5084 EXTRACT REGISTER INFORMATION 

5086 DETERMINATION OF AUTHENTICATION SYSTEM 

FIGURE 40 

SYNCHRONIZATION SERVER USER TERMINAL 

TO 524 

5282 HAS REGISTER NUMBER BEEN SENT FROM THE USER TERMINAL? 
5284 TIME-OUT? 

528 6 DISCONNECT CONNECTION WITH REGISTER TERMINAL 
5288 DOES THE REGISTER NUMBER TRANSMITTED BY THE USER 
TERMINAL MATCH THE REGISTER NUMBER IN THE "AWAITING 
RECEPTION" CONDITION? 

52 90 TRANSMIT REGISTER NUMBER ERROR 
5292 DISPLAY REGISTER NUMBER ERROR 
52 94 ESTABLISH SYNCHRONIZATION 

FIGURE 41 

5360 DETECT USER TERMINAL NUMBER 

5362 ACCESS USER DATABASE 

5364 USER REGISTRATION CONFIRMED? 

5366 TRANSMIT MESSAGE "NOT REGISTERED" TO USER TERMINAL 
5368 RELEASE SYNCHRONIZATION 
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5370 EXTRACT USER INFORMATION 
5372 USER USE CONDITION CONFIRMED? 

5374 TRANSMIT MESSAGE "NOT AVAILABLE FOR USE" TO USER 
TERMINAL 

537 6 RELEASE SYNCHRONIZATION 
FIGURE 42 

REGISTER SERVERSYNCHRONIZATION SERVER USER TERMINAL 
5382 CREATE AUTHENTICATION DATA 

5384 INITIALISE NUMBER OF TIMES OF PASSWORD REQUESTS N=0 
5388 TRANSMIT PASSWORD REQUEST 
5390 INPUT PASSWORD 
5392 TRANSMIT PASSWORD 
5394 PASSWORD CHECK? 

5400 TRANSMIT MESSAGE "AUTHENTICATION FAILED" 

5402 DISPLAY "AUTHENTICATION FAILED" 

5404 TRANSMIT MESSAGE "AUTHENTICATION FAILED" 

5406 DISPLAY "AUTHENTICATION FAILED" 

5408 RELEASE SYNCHRONIZATION 

FIGURE 4 3 
(A) 

THANK YOU FOR SHOPPING WITH ON-LINE SHOPPING. 

YOUR ACCOUNT IS AS FOLLOWS. 

ONE PERSONAL COMPUTER: 200,000 YEN 

ONE ADDITIONAL MEMORY 64 M: 10,000 YEN 
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BOTTOM 



622 ,waoos ^ 



162 



FIGURE 45 

622 VARIOUS DBS 

640 SETTLEMENT PROCESSING MODULE 
642 FIRST COMMUNICATION MODULE 
64 4 SECOND COMMUNICATION MODULE 
64 6 DB LOOK-UP MODULE 
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